Lead Associate Principal, Cloud Engineering

What you're going to do in this role includes managing, maintaining, and continuously automating a complex Kubernetes‑based cloud computing environment. You’ll provide technical guidance to the team, act as a liaison between internal departments, and use best practices for managing, configuring, and automating Kubernetes clusters and containerized workloads. You will drive new infrastructure and environment creation to support growth and adoption of Kubernetes/container orchestration across the business while staying current on trends and compliance demands (CIS, NIST, etc.).

• Reports to the Director of Platform Automation and Cloud Engineering
• Design, configure, implement and manage Kubernetes clusters and maintain a fully automated workflow for provisioning and managing a complex, highly available container orchestration environment using infrastructure as code
• Develop and maintain Kubernetes operators, controllers, and custom resources to extend cluster functionality and automate application lifecycle management
• Manage Dev Ops development activities and complex development tasks that involve tools such as Docker, Kafka, container runtimes, and Kubernetes ecosystem tools
• Lead and participate in Kubernetes cluster build‑outs, upgrades, software installation, maintenance and support, including patches, security fixes, end‑of‑life preparation, and version upgrades
• Implement and manage Kubernetes networking solutions, service mesh architectures, runtime security policies, and RBAC configurations to ensure secure and efficient cluster operations
• Ensure the reliability of Kubernetes platforms and containerized services your area of responsibility manage to meet specific and implied SLAs, helping the organization achieve quality standard excellence for the cloud platform
• Assess and plan for capacity needs within Kubernetes clusters and the underlying cloud platform and forecast accordingly
• Implement and manage initiatives within your assigned area of responsibility with accountability for results and compliance with all controls and security requirements
• Lead in the development of technology roadmaps and end‑of‑life technology plans for Kubernetes versions, container runtimes, and related cloud‑native technologies
• Write and maintain documentation of relevant Kubernetes architectures, systems, procedures and processes
• Effectively communicate project and operational service issues to senior management promptly with observations, decisions, and recommendations for corrective measures
• Manage and participate in the implementation of production changes during defined maintenance windows and support on‑call rotation
• Maintain appropriate work/personal balance within your team
• Serve as a point of escalation within the team for Kubernetes and containerization support issues
• Implement and manage rotational support schedules for after‑hours and weekend work for area of responsibility
• Foster an atmosphere of trust, respect, and high performance while displaying strong ethics and integrity
• Manage project and daily task planning and prioritization and meet project deadlines while also maintaining a high quality of work
• Institute corrective actions to address audit and other regulatory or compliance findings
• Operate within budget; establish and assure adherence to schedules, work plans, and performance requirements
• Other duties as assigned

• None

• [Required] Good consultative, communication, team player and analytical skills are a must, as you will be regularly interacting with various teams distributed across the US
• [Required] Working knowledge of Kubernetes architecture, container orchestration, and cloud‑native infrastructure design and components, such as etcd, networking, storage, and container runtimes
• [Required] Extensive hands‑on experience with Kubernetes cluster creation, maintenance, support, and administration in production environments
• [Required] Deep understanding and practical implementation experience with Kubernetes networking (CNI plugins, service types, ingress controllers), runtime security (Pod Security Standards, OPA/Gatekeeper,…