Kubernetes Platform Engineer

Insight Softmax is a leading organization in the fields of machine learning, data science, and high-performance computing (HPC). We are dedicated to providing innovative solutions in computing technology to solve complex problems in various sectors including research, science, manufacturing, finance, and data analytics.

Description:

We are hiring a Kubernetes Platform Engineer for our engineering team. You will design, build and operate multi-tenant Kubernetes platforms for GPU and HPC workloads, and the automation, identity and security layers around them.

Our customers include a Kubernetes platform vendor who has us build and deliver their product, enterprises and telcos deploying GPU clusters inside strict security perimeters, and neoclouds standing up multi-tenant capacity at scale.

Much of this work happens inside large-enterprise security and compliance processes. You need to be comfortable getting things done in those environments: understanding why the controls exist, designing within them, and knowing when and how to push for an exception.

This is a platform engineering role, not IT administration. You write code, build automation, and leave behind systems that run without you.

Our team requires individuals with focus on delivery and results, hunger to learn, ability to adapt, and can thrive in a self-directed environment where you’ll figure out what’s needed to deliver rather than wait for detailed instructions

Key Responsibilities:

Design, deploy and operate Kubernetes clusters on bare metal, cloud and edge, including multi-tenant and air-gapped deployments.

Build cluster lifecycle automation: bare metal provisioning, immutable node images, cluster profiles and packages, upgrades and fleet management.

Operate GPU workloads on Kubernetes: device plugins, Dynamic Resource Allocation, GPU partitioning, node tuning, high-speed networking and storage.

Build and maintain infrastructure as code and CI/CD pipelines (Terraform, Ansible, GitLab or GitHub, Helm, GitOps).

Implement identity and access: SSO and SAML, OIDC, Entra ID, Okta, AWS Organizations and IAM, role-based access across clusters and cloud accounts.

Harden platforms for enterprise and sovereign environments: network policy, secrets management, image signing and scanning, FIPS, audit logging, compliance evidence.

Own day-2 operations for managed service customers: monitoring, alerting, on-call rotations, patching, incident response and runbooks.

Work with customer security, network and platform teams to get access, approvals and changes through their processes.

Reserve time each week for pre-sales support, internal platform work and mentoring.

Qualifications:

At least 5 years in platform, DevOps or SRE roles, with at least 3 years running production Kubernetes you built yourself.

Deep Kubernetes knowledge: networking (CNI, Gateway API, service mesh), storage (CSI), scheduling, operators, multi-cluster management.

Strong linux chops, including networking, systemd, kernel and driver level troubleshooting.

Robust infrastructure as code and CI/CD experience with Terraform, Ansible and a GitOps toolchain.

Hands-on experience with enterprise identity and security: SSO, SAML and OIDC, IAM design, secrets management, network segmentation, security review processes.

Deep knowledge of at least one of AWS, GCP, or Azure. Preferably AWS.

Experience running on-call and incident response for production platforms.

Proficient in Python, Go or a similar language for automation and tooling.

Optional Experience and Skills:

Spectro Cloud Palette, PaletteAI and VerteX, or comparable cluster management platforms (Rancher, OpenShift, Cluster API).

Bare metal provisioning with MAAS, Ironic, PXE or BCM, and immutable OS images such as Kairos.

GPU operators, NVIDIA and AMD device plugins, RDMA and InfiniBand on Kubernetes.

Air-gapped or sovereign deployments, FIPS 140-3, DISA STIG or similar hardening.

Multi-tenancy design: namespaces, virtual clusters, quotas, chargeback.

Security tooling such as Vault, cert-manager, OPA or Kyverno, Falco, Trivy or Cosign.

Telco or large enterprise experience.

Bonus Experience and Skills:

Slurm or other batch schedulers alongside Kubernetes.

AWS Outposts or other hybrid cloud hardware.

Observability stacks: Prometheus, Grafana, OpenTelemetry, PagerDuty.

Rust.

Using linux as your primary desktop workstation environment.

Attributes that we value:

Transparency

Grit

Effectiveness

Willingness to learn

Location and Hours:

Full time position

Remote work environment

80% of your work schedule will be during the business time zones for Latin America and Canada.

Some customer meetings will occur each week at non-standard / nighttime hours, as we currently support a global team across 3-4 continents.

Some customer engagements include on-site work at US customer sites, typically for workshops, platform bring-up and go-live. Expect occasional US travel.

Participation in an on-call rotation for managed service customers.

References:

3 references will be required.

Notes:

AI systems may be used with the recruitment and screening processes for this job requisition.