Cloud Native Platform Architect (Kubernetes, Istio, GitOps, Observability)

Project overview

For our client, we are looking for a Senior Architect Cloud Native Platform (m/f/d)

Our client, a public institution, operates a central, highly available container platform based on a Kubernetes cluster landscape that provides application-related services for numerous DevOps and development teams. The focus of the long-term project is the conception, further development, and operation of cloud-native platform services around Service Mesh (Istio), Load Balancing (AVI), Observability, GitOps (Flux), Security, Network, Certificate Management, as well as the declarative management of infrastructure resources such as HashiCorp Vault secrets, DB instances, Kafka topics, and S3 storage.

Responsibilities

• Conception, architecture, further development, and operation of application-related platform services on Kubernetes
• Setup and further development of Service Mesh components, especially with Istio
• Conception and operation of Observability solutions for metrics, logs, and traces
• Use and further development of Prometheus, Loki, Tempo, and Grafana
• Implementation and operation of GitOps solutions with Flux and GitHub
• Declarative management of cluster and platform resources, configurations, secrets, certificates, database instances, Kafka topics, and storage resources
• Conception and operation of Kubernetes security components, especially Admission Controller, Kyverno, and Certificate Management
• Development, operation, and further development of Kubernetes Operators
• Analysis and resolution of complex error patterns together with development and infrastructure teams
• Ensuring availability, stability, security, and up-to-dateness of platform components
• Handling of incidents, problems, and changes
• Documentation of the system landscape as well as technical concepts and operating procedures
• Technical consulting, onboarding, coaching, and knowledge transfer for DevOps teams
• Participation in an agile environment with dailies, sprint planning, reviews, and retrospectives; task management via Jira and Confluence

Requirements

Application:

We look forward to receiving your application with your current CV (in German) and your hourly rate.

For questions, please contact us via Freelancermap.

Your QUINCEY Team

• Many years of experience in the conception, setup, and operation of Kubernetes container platforms in the cloud-native environment
• More than 3 years of experience in implementing and operating application-related platform services on Kubernetes, especially Istio, Prometheus, Loki, Tempo, Flux, GitHub, and Kyverno
• More than 5 years of experience in development with Java and Go
• In-depth knowledge in the conception, setup, and operation of GitOps solutions
• In-depth knowledge in the area of Service Mesh, especially Istio
• In-depth knowledge in the area of Observability, especially Prometheus, Loki, Tempo, and Grafana
• In-depth knowledge in Kubernetes Security, especially Admission Controller, Kyverno, and Certificate Management
• In-depth knowledge in the conception, setup, and operation of Kubernetes Operators
• Experience in Kubernetes networking as well as load balancing concepts
• Experience with highly available, distributed system architectures and multi-tier applications
• Experience in architecture, operation, and further development of Java/Java EE-related middleware and platform landscapes
• Very good knowledge of Linux/Unix environments as well as container technologies, especially Docker
• In-depth knowledge of messaging infrastructures and middleware, e.g., Kafka, Java EE application servers, web servers, ESB or portal solutions
• In-depth knowledge of network technologies (TCP/IP, LAN/WAN) as well as security architectures such as DMZ and firewall
• Experience with relational and NoSQL databases, e.g., Oracle, Oracle RAC, MS SQL Server
• Basic knowledge of management and deployment procedures as well as ITIL
• Proof of experience in the current CV with concrete reference projects from the last one to two years, especially for Kubernetes platform services, Istio, Prometheus, Loki, Tempo, Flux, GitHub, Kyverno, Java, and Go
• Participation in on-site appointments (Sprint Plannings, Reviews, Retrospectives), approx. 20% on-site, approx. 80% remote
• Willingness to undergo SÜ2 (Security Clearance)

Project details

Asap

6 months + extension option

Format: Remote and on-site

Client: Client from the public sector

• Start: ab sofort
• Duration: 6 Monate
• Remote: hybrid
• Location: Bayern, Deutschland, DE
• Languages: German