Senior Cloud Platform Architect – AWS EKS, API Containerization

🕒 Agosto 25

🏄 California – Remoto

🏄 California – Remote

⏰ Tempo Integral

🟠 Sênior

🔙 Engenheiro Backend

👻 Score fantasma 35%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

DKSH Portugal, Unipessoal, Lda.

SiteLinkedInTodas as Vagas

11 - 50 funcionários

Fundada em 2014

🍽️ Alimentos e Bebidas

📦 Logística

💼 Consultoria

Food & Beverage • Logistics • Consulting

DKSH Portugal, Unipessoal, Lda. é a operação portuguesa da DKSH, um provedor global de serviços de expansão de mercado que auxilia empresas multinacionais a distribuir, comercializar e vender produtos químicos especiais, ingredientes (alimentícios e bebidas, cuidados pessoais), produtos farmacêuticos e materiais de alta performance. A empresa oferece serviços B2B de ponta a ponta — incluindo distribuição, marketing, vendas, logística e suporte regulatório — para ajudar os parceiros a expandir sua presença em Portugal e conectar mercados locais a marcas globais.

Descrição

• Lead containerization of a large-scale API estate for an enterprise financial services client • Turn an approved AWS EKS reference architecture into a secure, repeatable production platform • Build and review Terraform, Helm, Kustomize, Flux, and Istio policy • Implement a multi-AZ EKS Auto Mode foundation and golden path using VPC CNI, Karpenter, KEDA, and reusable Terraform/Helm/Kustomize modules • Document the platform and make it operable by SRE • Establish Flux as the sole production delivery path with continuous reconciliation, signed digest-pinned images, GitLab CI and Artifactory integration, and Flagger SLO-gated canaries • Implement Istio Ambient service mesh, including istiod, istio-cni, ztunnel, opt-in waypoints, SPIFFE workload identity, strict mTLS, AuthorizationPolicy, and default-deny NetworkPolicy • Measure service-mesh latency and overhead • Govern north-south ingress with Tyk Self-Managed and its Operator, including authentication, rate limits, routing, REST-to-gRPC transcoding, and API migration • Implement security controls including Pod Security Standards, Kyverno admission policy, EKS Pod Identity, Secrets Manager/CSI, KMS, cert-manager, image signing, and SBOMs • Build a durable billing and audit capture path using Kinesis, Firehose, S3 Object Lock, and an approved load-tested reliability contract • Establish gRPC/Protobuf as the east-west standard with buf breaking-change checks • Build SLOs, error budgets, and OpenTelemetry-based metrics, logs, and traces into the platform • Create architecture decision records, threat models, and standards • Coach platform, SRE, and application engineers • Represent Opplane in client architecture reviews

🎯 Requisitos

• 12+ years in software, infrastructure, or platform engineering • 5+ years of hands-on production Kubernetes on AWS, including EKS architecture, operations, networking, upgrades, scaling, and incident troubleshooting • Proven track record of standing up EKS platforms end to end and containerizing existing API workloads at enterprise scale • Strong Terraform, Helm, and Kustomize skills • Reusable platform-module design • Defensible architecture decisions and cross-team leadership in a regulated environment • Production service mesh ownership, including Istio architecture, policy, rollout, performance, and troubleshooting; Ambient mode especially relevant • Deep GitOps experience with continuous reconciliation, drift management, and environment promotion; ability to implement Flux • Practical Kubernetes and AWS security knowledge, including PSS, policy as code, NetworkPolicy, IAM, Pod Identity, KMS, certificate management, image signing, and SBOMs • API gateway and regulated audit/event-ingestion design experience; ability to own a self-managed gateway • Working knowledge of gRPC, HTTP/2, and Protobuf • Enough Java 21 and Spring Boot familiarity to review the reference runtime pattern • Observability expertise across metrics, logs, traces, SLOs, and rollout analysis with OpenTelemetry • Performance validation at tens of thousands of TPS • Requires US Pacific hours overlap • Requires an escalation rotation during build-out • Requires client background screening • California preferred • Direct Tyk experience strongly preferred • AWS Solutions Architect Professional and CKA/CKS certifications are nice to have

🏖️ Benefícios

• Permanent full-time employment • Remote work within the US • California preferred for occasional client-site workshops and readiness reviews • US Pacific hours overlap • Global and multicultural team • Fast-moving, impact-driven startup environment • Ownership over work built • Collaborative, open, curious, and supportive culture