Kubernetes Platform Engineer

Insight Softmax is a leading organization in the fields of machine learning, data science, and high-performance computing (HPC). We are dedicated to providing innovative solutions in computing technology to solve complex problems in various sectors including research, science, manufacturing, finance, and data analytics.

Description

• We are hiring a Kubernetes Platform Engineer for our engineering team. You will design, build and operate multi-tenant Kubernetes platforms for GPU and HPC workloads, and the automation, identity and security layers around them.

• Our customers include a Kubernetes platform vendor who has us build and deliver their product, enterprises and telcos deploying GPU clusters inside strict security perimeters, and neoclouds standing up multi-tenant capacity at scale.

• Much of this work happens inside large-enterprise security and compliance processes. You need to be comfortable getting things done in those environments: understanding why the controls exist, designing within them, and knowing when and how to push for an exception.

• This is a platform engineering role, not IT administration. You write code, build automation, and leave behind systems that run without you.

• Our team requires individuals with focus on delivery and results, hunger to learn, ability to adapt, and can thrive in a self-directed environment where you’ll figure out what’s needed to deliver rather than wait for detailed instructions

Key Responsibilities

• Design, deploy and operate Kubernetes clusters on bare metal, cloud and edge, including multi-tenant and air-gapped deployments.

• Build cluster lifecycle automation: bare metal provisioning, immutable node images, cluster profiles and packages, upgrades and fleet management.

• Operate GPU workloads on Kubernetes: device plugins, Dynamic Resource Allocation, GPU partitioning, node tuning, high-speed networking and storage.

• Build and maintain infrastructure as code and CI/CD pipelines (Terraform, Ansible, GitLab or GitHub, Helm, GitOps).

• Implement identity and access: SSO and SAML, OIDC, Entra ID, Okta, AWS Organizations and IAM, role-based access across clusters and cloud accounts.

• Harden platforms for enterprise and sovereign environments: network policy, secrets management, image signing and scanning, FIPS, audit logging, compliance evidence.

• Own day-2 operations for managed service customers: monitoring, alerting, on-call rotations, patching, incident response and runbooks.

• Work with customer security, network and platform teams to get access, approvals and changes through their processes.

• Reserve time each week for pre-sales support, internal platform work and mentoring.

Qualifications

• At least 5 years in platform, DevOps or SRE roles, with at least 3 years running production Kubernetes you built yourself.

• Deep Kubernetes knowledge: networking (CNI, Gateway API, service mesh), storage (CSI), scheduling, operators, multi-cluster management.

• Strong linux chops, including networking, systemd, kernel and driver level troubleshooting.

• Robust infrastructure as code and CI/CD experience with Terraform, Ansible and a GitOps toolchain.

• Hands-on experience with enterprise identity and security: SSO, SAML and OIDC, IAM design, secrets management, network segmentation, security review processes.

• Deep knowledge of at least one of AWS, GCP, or Azure. Preferably AWS.

• Experience running on-call and incident response for production platforms.

• Proficient in Python, Go or a similar language for automation and tooling.

Optional Experience and Skills:

• Spectro Cloud Palette, PaletteAI and VerteX, or comparable cluster management platforms (Rancher, OpenShift, Cluster API).

• Bare metal provisioning with MAAS, Ironic, PXE or BCM, and immutable OS images such as Kairos.

• GPU operators, NVIDIA and AMD device plugins, RDMA and InfiniBand on Kubernetes.

• Air-gapped or sovereign deployments, FIPS 140-3, DISA STIG or similar hardening.

• Multi-tenancy design: namespaces, virtual clusters, quotas, chargeback.

• Security tooling such as Vault, cert-manager, OPA or Kyverno, Falco, Trivy or Cosign.

• Telco or large enterprise experience.

Bonus Experience and Skills:

• Slurm or other batch schedulers alongside Kubernetes.

• AWS Outposts or other hybrid cloud hardware.

• Observability stacks: Prometheus, Grafana, OpenTelemetry, PagerDuty.

• Rust.

• Using linux as your primary desktop workstation environment.

Attributes that we value:

• Transparency

• Grit

• Effectiveness

• Willingness to learn

Location and Hours:

• Full time position

• Remote work environment

• 80% of your work schedule will be during the business time zones for Latin America and Canada.

• Some customer meetings will occur each week at non-standard / nighttime hours, as we currently support a global team across 3-4 continents.

• Some customer engagements include on-site work at US customer sites, typically for workshops, platform bring-up and go-live. Expect occasional US travel.

• Participation in an on-call rotation for managed service customers.

References:

• 3 references will be required.

Notes:

• AI systems may be used with the recruitment and screening processes for this job requisition.