- Primary Responsibilities
- Design, deploy, and manage Kubernetes clusters on AWS EKS with a focus on reliability, security, and cost efficiency
Develop infrastructure-as-code using Terraform, CloudFormation, or similar tools; maintain version control and CI/CD integration for all infrastructure changes
Architect and implement AWS networking solutions including VPCs, security groups, load balancing, and service mesh technologies
Design and implement identity and access management (IAM) strategies, including RBAC, service accounts, and cross-account access patterns
Establish observability and monitoring across infrastructure, troubleshoot production issues, and drive continuous improvement
Partner with development teams to enable self-service capabilities and reduce operational friction
- Document architectural decisions and maintain runbooks for critical infrastructure
- Required Qualifications
- 5+ years of experience with infrastructure engineering or equivalent platform engineering experience
Strong hands-on experience with Kubernetes (production deployments, resource management, troubleshooting)
Demonstrated expertise in infrastructure-as-code (Terraform, CloudFormation, or similar)
Solid understanding of AWS services, particularly EC2, ECS/EKS, RDS, S3, VPC, and related networking components
Deep knowledge of IAM principles and hands-on experience implementing least-privilege access controls
Experience with networking fundamentals (TCP/IP, DNS, TLS, load balancing, service mesh concepts)
Proficiency in at least one programming/scripting language (Go, Python, Bash, or similar)
Experience managing containers and container orchestration in production environments
Strong problem-solving skills and demonstrated ability to handle on-call escalations
Experience with service mesh technologies (Istio, Linkerd)
Familiarity with GitOps workflows and tools (ArgoCD, Flux)
Experience with observability and monitoring tools (Prometheus, Grafana, DataDog, New Relic)
Knowledge of security best practices for Kubernetes and AWS (pod security policies, network policies, SIEM integration)
Demonstrated comfort using Claude.ai or similar AI tools to enhance productivity and accelerate problem-solving
Experience with cost optimization and capacity planning in AWS
Involvement in on-call rotations and incident response experience
What you'll work with
AWS services: EKS, EC2, RDS, S3, VPC, IAM, ALB/NLB, Route 53, CloudWatch
Infrastructure tools: Terraform, Kubernetes, Docker, Helm
Observability: CloudWatch, or similar monitoring/logging platforms
Collaboration tools: Git, CI/CD platforms, issue tracking systems
AI-assisted development: Claude.ai for code generation, documentation, and troubleshooting