The Senior Kubernetes Engineer (Onshore) leads the design, deployment, and operations of the Customer Proprietary Kubernetes Platform (CKP) within the AWS GovCloud environment. This role works on-site with the client to provision CKP clusters, deploy platform services, implement security hardening, and stand up observability infrastructure supporting CFB application workloads across NPE and production environments.
Key Responsibilities
Design and deploy Customer Proprietary Kubernetes Platform (CKP) provisioning pipelines via GitLab CI/CD and Terraform Enterprise (TFE).
Provision CKP instances for non-production (NPE) and production environments.
Deploy TFE on CKP; configure workspaces, OIDC-based GitLab integration, and encrypted state.
Apply CKP platform security hardening: RBAC, network policies, pod security standards, and FIPS-compliant configurations.
Deploy and maintain observability stack: Prometheus, Grafana, and Fluent Bit on CKP.
Deploy CFB applications (TAG, Cequence, 5x UIs, BriteBill) to CKP in NPE and PROD; validate application health and security controls.
Implement per-application security controls: mTLS, Splunk/Cribl log forwarding, and application-level observability dashboards.
Execute DR exercises and validate cluster recovery procedures.
Deliver KT sessions on CKP operations and security monitoring to client teams.
Contribute to operational runbooks and the system handover document.
Required Qualifications
8+ years of infrastructure/platform engineering with 5+ years of Kubernetes production experience.
Expert-level Kubernetes skills: cluster provisioning, RBAC, network policies, storage, and upgrades.
Experience deploying and operating Kubernetes on AWS (EKS or equivalent on GovCloud).
Hands-on experience with Helm, kubectl, Kustomize, and GitOps tooling.
Proficiency with Terraform and GitLab CI/CD for Kubernetes provisioning pipelines.
FIPS 140-2 and encryption-hardening experience in Kubernetes environments.
Experience with Prometheus, Grafana, and Fluent Bit for cluster observability.
U.S. Citizenship required - GovCloud access requires US-persons confirmation.
Preferred Qualifications
Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS).
AWS Certified Solutions Architect with EKS-focused experience.
Experience with Splunk/Cribl integration from Kubernetes workloads.
Familiarity with FedRAMP or DoD IL2 container security standards.
Experience with supply-chain security: image signing (Cosign/Sigstore), SBOM, admission controllers (OPA/Gatekeeper).
...All candidates must have US Work authorization to be considered for this role SIGNING BONUS OFFERED Up to $2,500.00 Lead Esthetician Cherokee, North Carolina Harrahs Cherokee Casino Resort We are seeking an experienced Lead Esthetician to join our luxury...
...Job Requisition ID:94508 Location Designation: Fully Remote Senior Associate Underwriter Fully Remote with occasional travel - Our typical travel is about 4 days 2 times per year . Role Overview Reporting to a Managing Underwriter, the...
...committed to creating jobs and building community through manufacturing.As we grow, we are looking for a Personal / Administrative Assistant to support our CEO and management team. Ideal candidates possess an interest in design, real estate, architecture,...
...engage in remote collaboration for a worldwide presence. About the Role: We are looking for a curious and analytical Data Analyst to help transform complex data into actionable insights that drive product, customer, and business decisions. In this role...
...Program Analyst Location:(ON SITE - DC) Department: Department of Veterans Affairs (VA) Type: Full Time Minimum Experience: Experienced Security Clearance Level: Ability to pass a background check Military Veterans and individuals with disabilities are...