Kubernetes Platform Engineer

Insight Softmax is a leading organization in the fields of machine learning, data science, and high-performance computing (HPC). We are dedicated to providing innovative solutions in computing technology to solve complex problems in various sectors including research, science, manufacturing, finance, and data analytics.

Description:

• We are hiring a Kubernetes Platform Engineer for our engineering team. You will design, build and operate multi-tenant Kubernetes platforms for GPU and HPC workloads, and the automation, identity and security layers around them.
• Our customers include a Kubernetes platform vendor who has us build and deliver their product, enterprises and telcos deploying GPU clusters inside strict security perimeters, and neoclouds standing up multi-tenant capacity at scale.
• Much of this work happens inside large-enterprise security and compliance processes. You need to be comfortable getting things done in those environments: understanding why the controls exist, designing within them, and knowing when and how to push for an exception.
• This is a platform engineering role, not IT administration. You write code, build automation, and leave behind systems that run without you.
  
• Our team requires individuals with focus on delivery and results, hunger to learn, ability to adapt, and can thrive in a self-directed environment where you’ll figure out what’s needed to deliver rather than wait for detailed instructions

Key Responsibilities:

• Design, deploy and operate Kubernetes clusters on bare metal, cloud and edge, including multi-tenant and air-gapped deployments.
  
• Build cluster lifecycle automation: bare metal provisioning, immutable node images, cluster profiles and packages, upgrades and fleet management.
• Operate GPU workloads on Kubernetes: device plugins, Dynamic Resource Allocation, GPU partitioning, node tuning, high-speed networking and storage.
• Build and maintain infrastructure as code and CI/CD pipelines (Terraform, Ansible, GitLab or GitHub, Helm, GitOps).
• Implement identity and access: SSO and SAML, OIDC, Entra ID, Okta, AWS Organizations and IAM, role-based access across clusters and cloud accounts.
• Harden platforms for enterprise and sovereign environments: network policy, secrets management, image signing and scanning, FIPS, audit logging, compliance evidence.
• Own day-2 operations for managed service customers: monitoring, alerting, on-call rotations, patching, incident response and runbooks.
• Work with customer security, network and platform teams to get access, approvals and changes through their processes.
• Reserve time each week for pre-sales support, internal platform work and mentoring.

Qualifications:

• At least 5 years in platform, DevOps or SRE roles, with at least 3 years running production Kubernetes you built yourself.
• Deep Kubernetes knowledge: networking (CNI, Gateway API, service mesh), storage (CSI), scheduling, operators, multi-cluster management.
• Strong linux chops, including networking, systemd, kernel and driver level troubleshooting.
• Robust infrastructure as code and CI/CD experience with Terraform, Ansible and a GitOps toolchain.
• Hands-on experience with enterprise identity and security: SSO, SAML and OIDC, IAM design, secrets management, network segmentation, security review processes.
• Deep knowledge of at least one of AWS, GCP, or Azure. Preferably AWS.
• Experience running on-call and incident response for production platforms.
• Proficient in Python, Go or a similar language for automation and tooling.

Optional Experience and Skills:

• Spectro Cloud Palette, PaletteAI and VerteX, or comparable cluster management platforms (Rancher, OpenShift, Cluster API).
• Bare metal provisioning with MAAS, Ironic, PXE or BCM, and immutable OS images such as Kairos.
• GPU operators, NVIDIA and AMD device plugins, RDMA and InfiniBand on Kubernetes.
• Air-gapped or sovereign deployments, FIPS 140-3, DISA STIG or similar hardening.
• Multi-tenancy design: namespaces, virtual clusters, quotas, chargeback.
• Security tooling such as Vault, cert-manager, OPA or Kyverno, Falco, Trivy or Cosign.
• Telco or large enterprise experience.

Bonus Experience and Skills:

• Slurm or other batch schedulers alongside Kubernetes.
• AWS Outposts or other hybrid cloud hardware.
• Observability stacks: Prometheus, Grafana, OpenTelemetry, PagerDuty.
• Rust.
• Using linux as your primary desktop workstation environment.

Attributes that we value:

• Transparency
• Grit
• Effectiveness
• Willingness to learn

Location and Hours:

• Full time position
• Remote work environment
• 80% of your work schedule will be during the business time zones for Latin America and Canada.
• Some customer meetings will occur each week at non-standard / nighttime hours, as we currently support a global team across 3-4 continents.
• Some customer engagements include on-site work at US customer sites, typically for workshops, platform bring-up and go-live. Expect occasional US travel.
• Participation in an on-call rotation for managed service customers.

References:

• 3 references will be required.

Notes:

• AI systems may be used with the recruitment and screening processes for this job requisition.