Required skills
- Kubernetes
- Kubernetes Architecture Design
- Kubernetes Networking
- Identity and Access Management (IAM)
- Single Sign-On (SSO)
- Kubernetes RBAC
- Kubernetes Security
- Technical Architecture Documentation
Languages: French
Job description
Design, build, and evolve highly secure private Kubernetes clusters in isolated environments with strong network and security constraints. The role focuses on Kubernetes architecture with Cloud Native, network/SDN, IAM, and cybersecurity challenges.
Project overview
Mission Context:
The objective is to design, build, and evolve highly secure private Kubernetes clusters in isolated environments with strong network and security constraints. The position is therefore very focused on Kubernetes architecture, with Cloud Native, network/SDN, IAM, and cybersecurity challenges.
Responsibilities
Design the architecture of private Kubernetes clusters: Control Plane, Worker Nodes, Ingress, subnets, high availability, sizing, and fault tolerance.
Produce HLA/HLD, LLD, DAT, and operational documentation.
Conduct comparative studies and PoCs to select technical solutions: CNI, GitOps, admission controllers, etc.
Design IAM / SSO integration with OIDC, Keycloak, Active Directory / Entra ID.
Define Kubernetes RBAC models and apply the principle of least privilege.
Implement hardening standards and Policy-as-Code, particularly via Kyverno or OPA Gatekeeper.
Work on Kubernetes networking issues: CNI, Network Policies / CiliumNetworkPolicies, firewall flows, IP/routing, and access isolation.
Define PRA / backup and restore mechanisms for clusters: ETCD, Velero, persistent storage, and manifests.
Define Kubernetes lifecycle procedures: zero-downtime upgrades, certificate rotation, node addition/removal.
Support application teams in adopting and using private clusters.
Profile Sought:
Minimum 7 years of experience in technical architecture.
Solid Kubernetes expertise in complex / private / secure environments.
Ability to truly design a Kubernetes architecture, not just operate or administer clusters.
Very good command of Kubernetes networking, IAM/SSO, RBAC, and security issues.
Ability to produce detailed architecture deliverables and to champion technical choices.
Retail / large distribution experience appreciated but not mandatory.
Master's degree in IT or equivalent experience.
Project details
- Start: 03/01/2027
- Duration: 10 mois
- Remote: hybrid
- Location: Massy, Île-de-France, FR
- Rate: 50-75 EUR/h
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on free-work.com