Senior Cloud Platform Architect – AWS EKS, API Containerization

🕒 il y a 2 mois

🏄 California – Distant

🏄 California – Remote

⏰ Temps Plein

🟠 Senior

🔙 Ingénieur Back-end

👻 Score fantôme 50%

Ce que ça veut dire : la probabilité que personne ne recrute vraiment pour cette offre.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

DKSH Portugal, Unipessoal, Lda.

Site WebLinkedInTous les Emplois

11 - 50 employés

Fondée en 2014

🍽️ Alimentation et boissons

📦 Logistique

💼 Conseil

Food & Beverage • Logistics • Consulting

DKSH Portugal, Unipessoal, Lda. est la filiale portugaise de DKSH, un prestataire mondial de services d'expansion de marché qui aide les entreprises multinationales à distribuer, commercialiser et vendre des produits chimiques spécialisés, des ingrédients (alimentaires et boissons, soins personnels), des produits pharmaceutiques et des matériaux de performance. La société offre des services B2B de bout en bout — y compris la distribution, le marketing, les ventes, la logistique et le soutien réglementaire — pour aider ses partenaires à accroître leur présence au Portugal et connecter les marchés locaux avec des marques mondiales.

Description

• Lead containerization of a large-scale API estate for an enterprise financial services client • Turn an approved AWS EKS reference architecture into a secure, repeatable production platform • Build and review Terraform, Helm, Kustomize, Flux, and Istio policy • Implement a multi-AZ EKS Auto Mode foundation and golden path using VPC CNI, Karpenter, KEDA, and reusable Terraform/Helm/Kustomize modules • Document the platform and make it operable by SRE • Establish Flux as the sole production delivery path with continuous reconciliation, signed digest-pinned images, GitLab CI and Artifactory integration, and Flagger SLO-gated canaries • Implement Istio Ambient service mesh, including istiod, istio-cni, ztunnel, opt-in waypoints, SPIFFE workload identity, strict mTLS, AuthorizationPolicy, and default-deny NetworkPolicy • Measure service-mesh latency and overhead • Govern north-south ingress with Tyk Self-Managed and its Operator, including authentication, rate limits, routing, REST-to-gRPC transcoding, and API migration • Implement security controls including Pod Security Standards, Kyverno admission policy, EKS Pod Identity, Secrets Manager/CSI, KMS, cert-manager, image signing, and SBOMs • Build a durable billing and audit capture path using Kinesis, Firehose, S3 Object Lock, and an approved load-tested reliability contract • Establish gRPC/Protobuf as the east-west standard with buf breaking-change checks • Build SLOs, error budgets, and OpenTelemetry-based metrics, logs, and traces into the platform • Create architecture decision records, threat models, and standards • Coach platform, SRE, and application engineers • Represent Opplane in client architecture reviews

🎯 Exigences

• 12+ years in software, infrastructure, or platform engineering • 5+ years of hands-on production Kubernetes on AWS, including EKS architecture, operations, networking, upgrades, scaling, and incident troubleshooting • Proven track record of standing up EKS platforms end to end and containerizing existing API workloads at enterprise scale • Strong Terraform, Helm, and Kustomize skills • Reusable platform-module design • Defensible architecture decisions and cross-team leadership in a regulated environment • Production service mesh ownership, including Istio architecture, policy, rollout, performance, and troubleshooting; Ambient mode especially relevant • Deep GitOps experience with continuous reconciliation, drift management, and environment promotion; ability to implement Flux • Practical Kubernetes and AWS security knowledge, including PSS, policy as code, NetworkPolicy, IAM, Pod Identity, KMS, certificate management, image signing, and SBOMs • API gateway and regulated audit/event-ingestion design experience; ability to own a self-managed gateway • Working knowledge of gRPC, HTTP/2, and Protobuf • Enough Java 21 and Spring Boot familiarity to review the reference runtime pattern • Observability expertise across metrics, logs, traces, SLOs, and rollout analysis with OpenTelemetry • Performance validation at tens of thousands of TPS • Requires US Pacific hours overlap • Requires an escalation rotation during build-out • Requires client background screening • California preferred • Direct Tyk experience strongly preferred • AWS Solutions Architect Professional and CKA/CKS certifications are nice to have

🏖️ Avantages

• Permanent full-time employment • Remote work within the US • California preferred for occasional client-site workshops and readiness reviews • US Pacific hours overlap • Global and multicultural team • Fast-moving, impact-driven startup environment • Ownership over work built • Collaborative, open, curious, and supportive culture

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV