Kubernetes Platform Architect

Job Description

Insight Global is seeking a Kubernetes Platform Architect to design Ecolab’s new enterprise container platform across Azure, AWS, and (later) GCP. AWS EKS is already live; the priority now is standing up the Azure AKS reference architecture from that model and bringing a fast-growing, mostly developer-built cluster estate under one secure, governed, templated baseline. This is a hands-on architect who sets the standards the Kubernetes and SRE teams build against - the foundation every future Ecolab microservice will run on.

Key Responsibilities:

• Reference architecture: Own the enterprise Kubernetes design - networking, storage, ingress, observability, multi-tenancy, and cluster lifecycle.
• Cloud-agnostic build: Architect portable clusters across AKS and EKS (GCP future); lead the Azure AKS buildout modeled on live AWS EKS.
• Networking at scale: Set CNI strategy and solve pod-IP/CIDR exhaustion (Cilium / eBPF) = networking is a core ask.
• Govern the estate: Bring developer-provisioned clusters under a governed, templated baseline with proper CI/CD.
• Standards: Define the Terraform/Helm module strategy and CI/CD + GitOps standards (Azure DevOps, GitHub Actions, ArgoCD).
• Security & observability: Architect CIS hardening, policy-as-code, and admission controls with security (Mythos remediation); set observability standards on Elastic and vulnerability scanning with Wiz.
• Leadership: Run architecture reviews and mentor engineers across the US and India.

Skills and Requirements

• 8+ years building and running production Kubernetes at enterprise scale, including 3+ years as an architect.
• Deep expertise with a managed Kubernetes service (AKS, EKS, or GKE) - networking, storage, ingress, observability, multi-tenancy.
• Proven cloud-agnostic design across at least 2 of the 3 major clouds (Azure primary; AWS and/or GCP) and hybrid/on-prem.
• Strong Kubernetes networking, including pod-IP allocation and CIDR strategy at scale (ideally Cilium / eBPF).
• Hands-on Terraform and Helm.
• Defined CI/CD and GitOps pipelines across Azure DevOps and GitHub Actions (ArgoCD or similar).
• Hardened Kubernetes/cloud to CIS standards.
• Strong scripting (Python, Bash, PowerShell, or Go) and clear communication with technical and non-technical audiences.
• GitOps and progressive delivery (Argo CD/Rollouts, Flux)
• Service mesh (Istio, Linkerd)
• Policy-as-code (OPA/Gatekeeper, Kyverno) and supply-chain security
• Observability (Elastic, Prometheus, Grafana, Datadog)
• CKA/CKAD/CKS or Azure/AWS/GCP architect certifications

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].