Kubernetes Administrator

C&DE-BFS-Kubernetes Administrator - NC/Charlotte / Hybrid work - 12+ months

Requisition Name: C&DE-BFS-Kubernetes Administrator

Start Date:

4/16/2026

Duration: 12+ Months

Services

Location:

NC/Charlotte / Hybrid work

Azure

Certifications:

Azure Solutions Architect Expert (AZ-305), Azure Security Engineer Associate (AZ-500), Azure Administrator Associate (AZ-104)

Platform Engineering:
Experience building internal developer platforms on Kubernetes, policy-as-code implementation (Azure Policy, OPA, Kyverno), cost optimization and Fin Ops practices for Kubernetes, chaos engineering and reliability testing multi‑region disaster recovery patterns

We are seeking an experienced Kubernetes Engineer/Administrator. This role focuses on managing and scaling our enterprise‑grade Azure Kubernetes Service (AKS) infrastructure. You will be responsible for designing, implementing, and maintaining production Kubernetes clusters that support critical enterprise workloads across multiple Azure regions.

• Azure Kubernetes Service (AKS) Management:
  Design, deploy, and manage enterprise‑scale AKS clusters across multiple Azure regions.
• Implement and maintain private AKS clusters with advanced networking configurations.
• Configure and manage customer‑managed encryption keys (CMK) for cluster disk encryption.
• Implement blue/green deployment strategies for zero‑downtime cluster upgrades.
• Manage AKS cluster lifecycle including upgrades, node pool scaling, and disaster recovery.
• Optimize cluster performance, cost, and resource utilization.
• Implement AKS Fleet Manager for multi‑cluster management and orchestration.
• Configure AKS Automatic for simplified cluster operations and auto‑scaling.
• Manage AKS Managed Name spaces for improved multi‑tenancy and resource isolation.

• Implement and maintain private networking architectures with Azure Private Endpoints.
• Configure and manage Workload Identity (OIDC) and user‑assigned managed identities.
• Integrate Azure Policy for governance, compliance, and security enforcement.
• Implement Kubernetes RBAC and Azure RBAC integration.
• Manage secrets integration with Azure Key Vault using CSI drivers.
• Ensure secure communication between AKS and Azure PaaS services.
• Implement network policies and pod security standards.

• Deploy and manage Linkerd service mesh for secure service-to-service communication.
• Implement mTLS between services with automatic certificate rotation.
• Configure traffic splitting, load balancing, and observability with Linkerd.
• Troubleshoot service mesh networking and performance issues.
• Integrate service mesh metrics with Azure Monitor.

• Develop and maintain Terraform modules for AKS and supporting Azure infrastructure.
• Build reusable, production‑ready Terraform patterns following Azure best practices.
• Implement infrastructure automation and Git Ops workflows.
• Manage Terraform state, version control, and module lifecycle.
• Create and maintain comprehensive documentation for infrastructure patterns.

• Design and implement Git Ops workflows using ArgoCD for application deployments.
• Build and maintain CI/CD pipelines using Git Hub Actions for Kubernetes workloads.
• Integrate AKS with Azure Container Registry (ACR) for container image management.
• Implement automated testing and validation for infrastructure and application changes.
• Manage deployment strategies (rolling updates, blue/green, canary).
• Maintain Git Hub Actions workflows for infrastructure provisioning and testing.

• Integrate AKS with Azure services.
• Configure and maintain private endpoints for all Azure services.
• Implement VNet integration and subnet delegation patterns.
• Design and implement service connectivity across Azure regions.

• Implement comprehensive monitoring and alerting with Azure Monitor.
• Configure Log Analytics work spaces and integrate with AKS.
• Build dashboards and alerts for cluster health, performance, and security.
• Leverage Linkerd metrics and distributed tracing for service observability.
• Troubleshoot complex cluster, networking, and application…