Kubernetes Platform Engineer

Insight Softmax is a leading organization in the fields of machine learning, data science, and high-performance computing (HPC). We are dedicated to providing innovative solutions in computing technology to solve complex problems in various sectors including research, science, manufacturing, finance, and data analytics.

Description:

* We are hiring a Kubernetes Platform Engineer for our engineering team. You will design, build and operate multi-tenant Kubernetes platforms for GPU and HPC workloads, and the automation, identity and security layers around them. * Our customers include a Kubernetes platform vendor who has us build and deliver their product, enterprises and telcos deploying GPU clusters inside strict security perimeters, and neoclouds standing up multi-tenant capacity at scale. * Much of this work happens inside large-enterprise security and compliance processes. You need to be comfortable getting things done in those environments: understanding why the controls exist, designing within them, and knowing when and how to push for an exception. * This is a platform engineering role, not IT administration. You write code, build automation, and leave behind systems that run without you.

* Our team requires individuals with focus on delivery and results, hunger to learn, ability to adapt, and can thrive in a self-directed environment where you'll figure out what's needed to deliver rather than wait for detailed instructions

Key Responsibilities:

* Design, deploy and operate Kubernetes clusters on bare metal, cloud and edge, including multi-tenant and air-gapped deployments.

* Build cluster lifecycle automation: bare metal provisioning, immutable node images, cluster profiles and packages, upgrades and fleet management. * Operate GPU workloads on Kubernetes: device plugins, Dynamic Resource Allocation, GPU partitioning, node tuning, high-speed networking and storage. * Build and maintain infrastructure as code and CI/CD pipelines (Terraform, Ansible, GitLab or GitHub, Helm, GitOps). * Implement identity and access: SSO and SAML, OIDC, Entra ID, Okta, AWS Organizations and IAM, role-based access across clusters and cloud accounts. * Harden platforms for enterprise and sovereign environments: network policy, secrets management, image signing and scanning, FIPS, audit logging, compliance evidence. * Own day-2 operations for managed service customers: monitoring, alerting, on-call rotations, patching, incident response and runbooks. * Work with customer security, network and platform teams to get access, approvals and changes through their processes. * Reserve time each week for pre-sales support, internal platform work and mentoring.

Qualifications:

* At least 5 years in platform, DevOps or SRE roles, with at least 3 years running production Kubernetes you built yourself. * Deep Kubernetes knowledge: networking (CNI, Gateway API, service mesh), storage (CSI), scheduling, operators, multi-cluster management. * Strong linux chops, including networking, systemd, kernel and driver level troubleshooting. * Robust infrastructure as code and CI/CD experience with Terraform, Ansible and a GitOps toolchain. * Hands-on experience with enterprise identity and security: SSO, SAML and OIDC, IAM design, secrets management, network segmentation, security review processes. * Deep knowledge of at least one of AWS, GCP, or Azure. Preferably AWS. * Experience running on-call and incident response for production platforms. * Proficient in Python, Go or a similar language for automation and tooling.

Optional Experience and Skills:

* Spectro Cloud Palette, PaletteAI and VerteX, or comparable cluster management platforms (Rancher, OpenShift, Cluster API). * Bare metal provisioning with MAAS, Ironic, PXE or BCM, and immutable OS images such as Kairos. * GPU operators, NVIDIA and AMD device plugins, RDMA and InfiniBand on Kubernetes. * Air-gapped or sovereign deployments, FIPS 140-3, DISA STIG or similar hardening. * Multi-tenancy design: namespaces, virtual clusters, quotas, chargeback. * Security tooling such as Vault, cert-manager, OPA or Kyverno, Falco, Trivy or Cosign. * Telco or large enterprise experience.

Bonus Experience and Skills:

* Slurm or other batch schedulers alongside Kubernetes. * AWS Outposts or other hybrid cloud hardware. * Observability stacks: Prometheus, Grafana, OpenTelemetry, PagerDuty. * Rust. * Using linux as your primary desktop workstation environment.

Attributes that we value:

* Transparency * Grit * Effectiveness * Willingness to learn

Location and Hours:

* Full time position * Remote work environment * 80% of your work schedule will be during the business time zones for Latin America and Canada. * Some customer meetings will occur each week at non-standard / nighttime hours, as we currently support a global team across 3-4 continents. * Some customer engagements include on-site work at US customer sites, typically for workshops, platform bring-up and go-live. Expect occasional US travel. * Participation in an on-call rotation for managed service customers.

References:

* 3 references will be required.

Notes:

* AI systems may be used with the recruitment and screening processes for this job requisition.