Required skills
- Kubernetes
- Kyverno
- OPA Gatekeeper
- Keycloak
- OIDC
- Active Directory
- Microsoft Entra ID
- Cilium Network Policies
- Velero
- etcd
- RBAC
- CNI
Languages: French
Job description
Design and evolve highly secure private Kubernetes clusters in isolated environments with strong network and security constraints. Integrate into a senior architecture team.
Project overview
Context
This is a pure design role: building and evolving highly secure private Kubernetes clusters, in isolated environments with strong network and security constraints. The consultant joins a small senior architecture team, with a Tech Lead.
Missions
Working conditions
- Cluster architecture (control plane, workers, ingress, subnets, high availability, sizing)
- Production of deliverables (HLA/HLD, LLD, DAT, operating files)
- Comparative studies and PoC (CNI, GitOps, admission controllers)
- IAM/SSO integration (OIDC, Keycloak, Active Directory/Entra ID)
- RBAC and least privilege management
- Hardening and Policy-as-Code (Kyverno, OPA Gatekeeper)
- Kubernetes network management (CNI, Network Policies, CiliumNetworkPolicies, firewall flows)
- Disaster recovery plan (DRP) (etcd, Velero, persistent storage)
- Lifecycle management (zero-downtime upgrades, certificate rotation, node addition/removal)
- Support for application teams
- Start date: January 4, 2027
- Location: Île-de-France
Project details
- Start: flexible
- Remote: hybrid
- Location: 91300 Massy, France, FR
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on collective.work