Senior Azure Platform Engineer (Kubernetes / AKS)

Quick Facts

• Role: Senior Azure Platform Engineer (Kubernetes / AKS)

Description

Design, standardize, automate, and operate secure Kubernetes-based infrastructure in Microsoft Azure, with a focus on AKS, networking, secrets management, and deployment automation. Build reusable deployment patterns and Helm/Terraform-driven platform capabilities for multi-instance environments with stringent security and compliance requirements. Support mTLS-based service connectivity, security hardening, vulnerability remediation, and FedRAMP readiness activities when needed.

Responsibilities

• Design, deploy, operate, and standardize AKS environments and supporting Azure infrastructure

• Create reusable patterns for multi-instance / multi-environment Kubernetes deployments

• Develop and maintain Helm charts for application and infrastructure deployments (upgrades, configuration management, release standardization)

• Design and maintain Azure networking: VNets/subnets, NSGs/routing, Private Endpoints, DNS, ingress/egress controls, load balancing, and Kubernetes networking

• Integrate and operate Azure Key Vault for secrets, certificates, keys, and workload access

• Implement infrastructure using Terraform, including reusable modules, state management, and CI/CD integration

• Use Kubernetes-native provisioning (e.g., Crossplane) to automate cloud resource lifecycle management

• Implement and troubleshoot mTLS-based service communication, certificate management, trust chains, and secure service-to-service connectivity

• Automate provisioning and lifecycle management for multiple platform and application instances

• Develop deployment automation for repeatable provisioning, upgrades, configuration changes, and operational processes

• Implement cloud and Kubernetes security controls for regulated environments; remediate vulnerabilities and security-hardening findings (e.g., DISA STIG)

• Contribute to FedRAMP readiness: technical control implementation, evidence generation, remediation, and infrastructure standardization

• Collaborate with application, security, DevOps/SRE, and architecture teams to establish common platform standards

• Support operations: monitoring, incident response, backup/restore, reliability, platform upgrades, vulnerability remediation, and production troubleshooting

Requirements

• Hands-on experience with Microsoft Azure

• Production experience with Azure Kubernetes Service (AKS) and Kubernetes administration

• Strong Helm experience (including developing Helm charts)

• Strong Terraform experience, preferably building reusable modules

• Solid understanding of Azure networking: VNets, routing, DNS, Private Endpoints, network security, ingress/egress, and connectivity troubleshooting

• Experience with Azure Key Vault, managed identities, certificates, and secrets management

• Good understanding of TLS/mTLS, PKI, certificate lifecycle, and secure application/service communication

• Experience implementing CI/CD and infrastructure automation

• Experience with Kubernetes and cloud security hardening

• Ability to troubleshoot complex infrastructure issues across Azure, Kubernetes, networking, DNS, TLS, and application connectivity

• Strong Linux and scripting skills (Bash and/or PowerShell)

• Experience with Git-based infrastructure and deployment workflows

Benefits

• Work on a secure, automated Kubernetes/AKS platform for multi-instance workloads with stringent security and compliance expectations

• Build and standardize reusable infrastructure patterns (Terraform/Helm) that improve consistency across environments