Tekfortune Inc. logo

Cloud Kubernetes Platform Engineer

Tekfortune Inc.
  • Summit, NJ
  • Instant Apply
5 days ago

Job Description

Tekfortune is a fast-growing consulting firm specialized in permanent, contract & project-based staffing services for world s leading organizations in a broad range of industries. In this quickly changing economic landscape, virtual recruiting and remote work are critical for the future of work. To support the active project demands and skills gaps, our staffing experts can help you find the best job for you.


Position: Cloud Kubernetes Platform Engineer
Location: Jersey City, NJ
Days in office: 3 days a week
Interview process: video interview to face to face (manager will not hire someone unless they go for a face to face)
Contract: 12 months extendable
Status: anything is fine, but we can NOT do transfer candidates, they must already be on your w-2
Must have: Kubernetes, Public cloud experience (azure or GCP), terraform (IAAC), security & vulnerability remediation

Position Summary
We are seeking an experienced Cloud Kubernetes Platform Engineer to join the App Engine Engineering team. This role focuses on building, operating, and maintaining production-grade Kubernetes clusters across Azure AKS and Google GKE, managing GitOps workflows with ArgoCD, developing Terraform infrastructure-as-code modules, and remediating security vulnerabilities across our container and cluster estate.
The ideal candidate has deep hands-on experience with Kubernetes in a large enterprise environment and is comfortable working across the full lifecycle from provisioning new clusters to day-2 operations, upgrades, security hardening, and decommissioning.

Key Responsibilities
Kubernetes Cluster Build & Operations
  • Build, configure, and maintain AKS and GKE clusters across multiple environments (lab, nonprod, preprod, production) and regions
  • Manage cluster lifecycle including provisioning, upgrades, scaling, patching, and decommissioning
  • Configure and manage node pools, namespaces, RBAC, network policies (Calico), and resource quotas
  • Implement and maintain cluster bootstrap components: ingress controllers (Nginx), monitoring (Prometheus/Grafana), logging (Fluentd/Splunk integration), and service mesh (Istio)
  • Manage cluster identity and access: Azure AD integration, Managed Identities, Service Principals, PIM, and Workload Identity Federation
  • Support disaster recovery operations across primary and DR clusters
Terraform & Infrastructure as Code
  • Develop, maintain, and enhance Terraform modules for AKS/GKE cluster provisioning, IAM, bootstrap, namespaces, and node pools
  • Work with Terraform Enterprise (TFE) workspaces manage workspace configuration, variable sets, VCS integration, and Sentinel policies
  • Maintain Storefront (SF) product definitions and composite workflows for automated cluster provisioning via Genie
  • Ensure infrastructure code follows GitLab branching strategy, release tagging, and merge request workflows
  • Collaborate with CloudOps and Platform teams on landing zone configurations, networking, and DNS
ArgoCD & GitOps
  • Deploy, configure, and maintain ArgoCD across all cluster environments
  • Manage ArgoCD application definitions, projects, RBAC policies, and repository configurations
  • Implement and maintain GitOps workflows for application and platform component deployments
  • Troubleshoot ArgoCD sync issues, drift detection, and webhook integrations
  • Manage ArgoCD hub-spoke architecture across multiple clusters
Security & Vulnerability Remediation
  • Triage and remediate container image vulnerabilities identified by Wiz.io, Microsoft Defender, and X-Ray scanning
  • Maintain and update base images across the container registry (Hubble/Artifactory)
  • Implement and enforce Azure Policy / OPA Gatekeeper constraints for CIS Kubernetes benchmarks
  • Manage CCM findings, exemptions, and compliance documentation
  • Perform security hardening: FIPS-enabled nodes, host encryption, private clusters, seccomp/AppArmor profiles, read-only root filesystems
  • Manage PKI certificates and Service Principal certificate lifecycle (creation, renewal, rotation)
  • Maintain secrets management using SMS2, Azure Key Vault, and Secrets Store CSI driver
Monitoring, Alerting & Support
  • Monitor cluster health, resource utilization, and platform service availability
  • Investigate and resolve platform incidents node failures, network issues, pod scheduling problems
  • Support application teams with onboarding, namespace provisioning, and troubleshooting
  • Participate in on-call rotation for production cluster support
Required Qualifications
  • 5+ years of hands-on experience with Kubernetes in production environments
  • 3+ years with Azure AKS and/or Google GKE
  • 3+ years with Terraform (HCL) writing modules, managing state, working with Terraform Enterprise or Terraform Cloud
  • 2+ years with ArgoCD or equivalent GitOps tooling (Flux)
  • Strong experience with container security scanning and vulnerability remediation
  • Proficiency with Linux, shell scripting (Bash), and at least one of: Go, Python
  • Deep understanding of Kubernetes networking: CNI plugins (Azure CNI, Calico, Kubenet), network policies, ingress controllers, DNS, load balancers
  • Experience with Kubernetes RBAC, Azure AD/Entra ID integration, Managed Identities, and Workload Identity
  • Experience with CI/CD pipelines using GitLab CI, Jenkins, or TeamCity
  • Familiarity with monitoring stacks: Prometheus, Grafana, Splunk, or equivalent
Preferred Qualifications
  • Experience with OpenShift (OCP) in addition to AKS/GKE
  • Experience with Helm chart development and management
  • Familiarity with OPA/Gatekeeper policy authoring and CIS Kubernetes benchmarks
  • Experience with Kafka/Strimzi (AMQ Streams) for event streaming in Kubernetes
  • Knowledge of Azure networking: VNets, NSGs, Private DNS Zones, hub-spoke topology, ExpressRoute
  • Experience with Velero for cluster backup and restore
  • Experience with cert-manager or PKI certificate lifecycle management
  • CKA, CKAD, or CKS certification
  • Experience in financial services or other highly regulated industries


For more information and other jobs available please contact our recruitment team at

careers@tekfortune.com

. To view all the jobs available in the USA and Asia please visit our website at https://www.tekfortune.com/careers/.

Numbers & Facts

LocationSummit, NJ
IndustryComputer Software
Company Size20 to 49 employees
Year Founded2014
Websitehttp://www.tekfortune.com/

About Company

Tekfortune is a software solutions company providing project development and staff augmentation services to companies in various industries including Healthcare, Banking, Finance, Telecommunication and Aviation.

Tekfortune Inc delivers solutions to a wide variety of organizations of various sizes and industries. Our clients include mid-market to Fortune 1000 companies spanning across industries such as: Insurance, Financial, Pharmaceutical, Manufacturing, Retail and many others.

In Tekfortune Inc, we are offering selection of services and solutions at very reasonable rates. With years of experience in the placement and recruitment Industry and over time we have acquired the knowledge essential to comprehend the exact need and dependence on customers. Therefore we provide the customers the best and also the brightest candidates for vacancies. Moreover, by understanding the working interest of customers who is able to place them within the companies where they are able to get maximum opportunity for professional growth.

Tekfortune Inc has a strong emphasis on quality. Its goal would be to achieve client satisfaction by looking into making deliveries satisfaction of customer's business needs. Our ability to quickly identify and effectively employ proven fundamental principles, techniques and resources yields highly desirable results for our clients.

We understand that each industry and organization share a level of uniqueness that requires a tailored approach in order to deliver specific solutions. Such factors as client culture, industry regulations, organizational maturity, financial health and many more items may impact our approach to delivering client solutions.

Having served a wide variety of clients has provided Tekfortune the ability to build subject matter expertise across numerous industries. Our industry expertise combined with our specialized knowledge of Business Process Improvement, Requirements Management and Program & Project Management provides a powerful combination and a tremendous value to our clients.

We are run by a group of industry experts who have decades of experience in delivering custom solutions to our clients.

Skills

  • Bash Scriptingunmatched
  • Benchmarkingunmatched
  • Bootstrapunmatched
  • Cloud Computingunmatched
  • Computer Securityunmatched
  • Configuration Managementunmatched
  • Consultingunmatched
  • Continuous Deployment/Deliveryunmatched
  • Continuous Integrationunmatched
  • Cryptographyunmatched
  • DNS (Domain Name System)unmatched
  • Data Recoveryunmatched
  • Digital Certificatesunmatched
  • Disaster Recoveryunmatched
  • Documentationunmatched
  • Federal Information Processing Standards (FIPS)unmatched
  • File Systemsunmatched
  • Financial Servicesunmatched
  • GCP (Good Clinical Practices)unmatched
  • Go Programming Language (Golang)unmatched
  • Google App Engine (GAE)unmatched
  • Identify Issuesunmatched
  • Identity Data Managementunmatched
  • Identity Federationunmatched
  • Jenkinsunmatched
  • Linux Operating Systemunmatched
  • Load Balancingunmatched
  • Machine Toolunmatched
  • Microsoft Product Familyunmatched
  • Microsoft Windows Azureunmatched
  • On Callunmatched
  • Onboardingunmatched
  • Operational Supportunmatched
  • Policy Developmentunmatched
  • Production Supportunmatched
  • Production Systemsunmatched
  • Protocol Independent Multicast (PIM)unmatched
  • Public Cloudunmatched
  • Public Key Infrastructure (PKI)unmatched
  • Python Programming/Scripting Languageunmatched
  • Radiographyunmatched
  • Resource Utilizationunmatched
  • Short Messaging Service (SMS)unmatched
  • Software Administrationunmatched
  • Software Engineeringunmatched
  • Software Patchesunmatched
  • Splunkunmatched
  • TeamCityunmatched
  • Topologyunmatched
  • Unix Shell Programmingunmatched
  • Vulnerability Scannersunmatched
  • Web Client Plug-insunmatched
  • Work From Homeunmatched
  • nginx Web Serverunmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder