Kubernetes Platform Engineer

Insight Softmax is a leading organization in the fields of machine learning, data science, and high-performance computing (HPC). We are dedicated to providing innovative solutions in computing technology to solve complex problems in various sectors including research, science, manufacturing, finance, and data analytics.

Description:

* We are hiring a Kubernetes Platform Engineer for our engineering team. You will design, build and operate multi-tenant Kubernetes platforms for GPU and HPC workloads, and the automation, identity and security layers around them.
* Our customers include a Kubernetes platform vendor who has us build and deliver their product, enterprises and telcos deploying GPU clusters inside strict security perimeters, and neoclouds standing up multi-tenant capacity at scale.
* Much of this work happens inside large-enterprise security and compliance processes. You need to be comfortable getting things done in those environments: understanding why the controls exist, designing within them, and knowing when and how to push for an exception.
* This is a platform engineering role, not IT administration. You write code, build automation, and leave behind systems that run without you.

* Our team requires individuals with focus on delivery and results, hunger to learn, ability to adapt, and can thrive in a self-directed environment where you'll figure out what's needed to deliver rather than wait for detailed instructions

Key Responsibilities:

* Design, deploy and operate Kubernetes clusters on bare metal, cloud and edge, including multi-tenant and air-gapped deployments.

* Build cluster lifecycle automation: bare metal provisioning, immutable node images, cluster profiles and packages, upgrades and fleet management.
* Operate GPU workloads on Kubernetes: device plugins, Dynamic Resource Allocation, GPU partitioning, node tuning, high-speed networking and storage.
* Build and maintain infrastructure as code and CI/CD pipelines (Terraform, Ansible, GitLab or GitHub, Helm, GitOps).
* Implement identity and access: SSO and SAML, OIDC, Entra ID, Okta, AWS Organizations and IAM, role-based access across clusters and cloud accounts.
* Harden platforms for enterprise and sovereign environments: network policy, secrets management, image signing and scanning, FIPS, audit logging, compliance evidence.
* Own day-2 operations for managed service customers: monitoring, alerting, on-call rotations, patching, incident response and runbooks.
* Work with customer security, network and platform teams to get access, approvals and changes through their processes.
* Reserve time each week for pre-sales support, internal platform work and mentoring.

Qualifications:

* At least 5 years in platform, DevOps or SRE roles, with at least 3 years running production Kubernetes you built yourself.
* Deep Kubernetes knowledge: networking (CNI, Gateway API, service mesh), storage (CSI), scheduling, operators, multi-cluster management.
* Strong linux chops, including networking, systemd, kernel and driver level troubleshooting.
* Robust infrastructure as code and CI/CD experience with Terraform, Ansible and a GitOps toolchain.
* Hands-on experience with enterprise identity and security: SSO, SAML and OIDC, IAM design, secrets management, network segmentation, security review processes.
* Deep knowledge of at least one of AWS, GCP, or Azure. Preferably AWS.
* Experience running on-call and incident response for production platforms.
* Proficient in Python, Go or a similar language for automation and tooling.

Optional Experience and Skills:

* Spectro Cloud Palette, PaletteAI and VerteX, or comparable cluster management platforms (Rancher, OpenShift, Cluster API).
* Bare metal provisioning with MAAS, Ironic, PXE or BCM, and immutable OS images such as Kairos.
* GPU operators, NVIDIA and AMD device plugins, RDMA and InfiniBand on Kubernetes.
* Air-gapped or sovereign deployments, FIPS 140-3, DISA STIG or similar hardening.
* Multi-tenancy design: namespaces, virtual clusters, quotas, chargeback.
* Security tooling such as Vault, cert-manager, OPA or Kyverno, Falco, Trivy or Cosign.
* Telco or large enterprise experience.

Bonus Experience and Skills:

* Slurm or other batch schedulers alongside Kubernetes.
* AWS Outposts or other hybrid cloud hardware.
* Observability stacks: Prometheus, Grafana, OpenTelemetry, PagerDuty.
* Rust.
* Using linux as your primary desktop workstation environment.

Attributes that we value:

* Transparency
* Grit
* Effectiveness
* Willingness to learn

Location and Hours:

* Full time position
* Remote work environment
* 80% of your work schedule will be during the business time zones for Latin America and Canada.
* Some customer meetings will occur each week at non-standard / nighttime hours, as we currently support a global team across 3-4 continents.
* Some customer engagements include on-site work at US customer sites, typically for workshops, platform bring-up and go-live. Expect occasional US travel.
* Participation in an on-call rotation for managed service customers.

References:

* 3 references will be required.

Notes:

* AI systems may be used with the recruitment and screening processes for this job requisition.