Senior Cloud Platform Architect – AWS EKS, API Containerization

🕒 vor 4 Tagen

🏄 California – Remote

🏄 California – Remote

⏰ Vollzeit

🟠 Senior

🔙 Backend-Entwickler

👻 Geisterscore 25%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

DKSH Portugal, Unipessoal, Lda.

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

Gegründet 2014

🍽️ Lebensmittel & Getränke

📦 Logistik

💼 Beratung

Food & Beverage • Logistics • Consulting

DKSH Portugal, Unipessoal, Lda. ist die portugiesische Niederlassung von DKSH, einem globalen Anbieter von Marktexpansionsdienstleistungen, der multinationalen Unternehmen dabei hilft, Spezialchemikalien, Zutaten (Lebensmittel & Getränke, Körperpflege), Pharmazeutika und leistungsfähige Materialien zu vertreiben, zu vermarkten und zu verkaufen. Das Unternehmen bietet umfassende B2B-Dienstleistungen – einschließlich Distribution, Marketing, Vertrieb, Logistik und regulatorischer Unterstützung – um Partner dabei zu unterstützen, ihre Präsenz in Portugal auszubauen und lokale Märkte mit globalen Marken zu verbinden.

Beschreibung

• Lead containerization of a large-scale API estate for an enterprise financial services client • Turn an approved AWS EKS reference architecture into a secure, repeatable production platform • Build and review Terraform, Helm, Kustomize, Flux, and Istio policy • Implement a multi-AZ EKS Auto Mode foundation and golden path using VPC CNI, Karpenter, KEDA, and reusable Terraform/Helm/Kustomize modules • Document the platform and make it operable by SRE • Establish Flux as the sole production delivery path with continuous reconciliation, signed digest-pinned images, GitLab CI and Artifactory integration, and Flagger SLO-gated canaries • Implement Istio Ambient service mesh, including istiod, istio-cni, ztunnel, opt-in waypoints, SPIFFE workload identity, strict mTLS, AuthorizationPolicy, and default-deny NetworkPolicy • Measure service-mesh latency and overhead • Govern north-south ingress with Tyk Self-Managed and its Operator, including authentication, rate limits, routing, REST-to-gRPC transcoding, and API migration • Implement security controls including Pod Security Standards, Kyverno admission policy, EKS Pod Identity, Secrets Manager/CSI, KMS, cert-manager, image signing, and SBOMs • Build a durable billing and audit capture path using Kinesis, Firehose, S3 Object Lock, and an approved load-tested reliability contract • Establish gRPC/Protobuf as the east-west standard with buf breaking-change checks • Build SLOs, error budgets, and OpenTelemetry-based metrics, logs, and traces into the platform • Create architecture decision records, threat models, and standards • Coach platform, SRE, and application engineers • Represent Opplane in client architecture reviews

🎯 Anforderungen

• 12+ years in software, infrastructure, or platform engineering • 5+ years of hands-on production Kubernetes on AWS, including EKS architecture, operations, networking, upgrades, scaling, and incident troubleshooting • Proven track record of standing up EKS platforms end to end and containerizing existing API workloads at enterprise scale • Strong Terraform, Helm, and Kustomize skills • Reusable platform-module design • Defensible architecture decisions and cross-team leadership in a regulated environment • Production service mesh ownership, including Istio architecture, policy, rollout, performance, and troubleshooting; Ambient mode especially relevant • Deep GitOps experience with continuous reconciliation, drift management, and environment promotion; ability to implement Flux • Practical Kubernetes and AWS security knowledge, including PSS, policy as code, NetworkPolicy, IAM, Pod Identity, KMS, certificate management, image signing, and SBOMs • API gateway and regulated audit/event-ingestion design experience; ability to own a self-managed gateway • Working knowledge of gRPC, HTTP/2, and Protobuf • Enough Java 21 and Spring Boot familiarity to review the reference runtime pattern • Observability expertise across metrics, logs, traces, SLOs, and rollout analysis with OpenTelemetry • Performance validation at tens of thousands of TPS • Requires US Pacific hours overlap • Requires an escalation rotation during build-out • Requires client background screening • California preferred • Direct Tyk experience strongly preferred • AWS Solutions Architect Professional and CKA/CKS certifications are nice to have

🏖️ Vorteile

• Permanent full-time employment • Remote work within the US • California preferred for occasional client-site workshops and readiness reviews • US Pacific hours overlap • Global and multicultural team • Fast-moving, impact-driven startup environment • Ownership over work built • Collaborative, open, curious, and supportive culture