Quick overview
SeniorityMid Senior
Work modeHybrid
LocationPhoenix, AZ, United States
GitAWSService MeshGitHub ActionsGoGoogle CloudHelmIstioTerraformAzureKubernetesCI/CDIAM
Job description
We are seeking a senior Kubernetes engineer proficient in Google Kubernetes Engine (GKE) to
provision, secure, operate, and optimize container platforms on Google Cloud Platform (Google Cloud Platform). You
will work hands-on across the full GKE lifecycle, including infrastructure as code, GitOps delivery,
identity and access, networking, service mesh, and policy enforcement, in a regulated enterprise
environment.
Hands-on production experience with Google Cloud Platform is mandatory. Candidates must have designed and
operated GKE on Google Cloud Platform, not just on-premises or on another cloud.
provision, secure, operate, and optimize container platforms on Google Cloud Platform (Google Cloud Platform). You
will work hands-on across the full GKE lifecycle, including infrastructure as code, GitOps delivery,
identity and access, networking, service mesh, and policy enforcement, in a regulated enterprise
environment.
Hands-on production experience with Google Cloud Platform is mandatory. Candidates must have designed and
operated GKE on Google Cloud Platform, not just on-premises or on another cloud.
Core Responsibilities
Cluster Provisioning and Lifecycle
• Provision, manage, and upgrade GKE clusters
• Automate infrastructure with Terraform, including reusable modules
• Configure cluster autoscaling and optimize resource usage and cost
Delivery and Platform Management
• Implement GitOps workflows with Argo CD
• Manage Helm charts and releases
• Manage Kubernetes Operators and Custom Resource Definitions (CRDs)
Identity, Access and Secrets
• Manage Google Cloud Platform IAM, service accounts, and Workload Identity Federation
• Implement GKE RBAC controls and access management
• Manage secrets with Google Cloud Platform Secret Manager and certificates with cert-manager
Networking and Service Mesh
• Configure Google Cloud Platform networking and firewall rules
• Define and enforce Kubernetes network policies
• Manage Istio service mesh, including gateways, traffic management, and mTLS
Security and Policy
• Enforce Kubernetes policy using admission controllers and policy-as-code (e.g., OPA
Gatekeeper, Kyverno, or GKE Policy Controller) [VERIFY which tool AXP uses]
• Support audit, risk, and compliance requirements
Observability
• Implement monitoring, logging, and alerting for clusters and workloads [VERIFY AXP tooling]
• Document designs and runbooks, and collaborate with security, network, and application
teams
• Provision, manage, and upgrade GKE clusters
• Automate infrastructure with Terraform, including reusable modules
• Configure cluster autoscaling and optimize resource usage and cost
Delivery and Platform Management
• Implement GitOps workflows with Argo CD
• Manage Helm charts and releases
• Manage Kubernetes Operators and Custom Resource Definitions (CRDs)
Identity, Access and Secrets
• Manage Google Cloud Platform IAM, service accounts, and Workload Identity Federation
• Implement GKE RBAC controls and access management
• Manage secrets with Google Cloud Platform Secret Manager and certificates with cert-manager
Networking and Service Mesh
• Configure Google Cloud Platform networking and firewall rules
• Define and enforce Kubernetes network policies
• Manage Istio service mesh, including gateways, traffic management, and mTLS
Security and Policy
• Enforce Kubernetes policy using admission controllers and policy-as-code (e.g., OPA
Gatekeeper, Kyverno, or GKE Policy Controller) [VERIFY which tool AXP uses]
• Support audit, risk, and compliance requirements
Observability
• Implement monitoring, logging, and alerting for clusters and workloads [VERIFY AXP tooling]
• Document designs and runbooks, and collaborate with security, network, and application
teams
Required Qualifications
• 7+ years in platform engineering, DevOps, SRE, or cloud infrastructure, with demonstrated
senior-level ownership of production Google Cloud Platform and GKE environments [VERIFY whether 7+ is total
experience or Kubernetes/GKE-specific]
• Mandatory: hands-on production experience with Google Cloud Platform
• Proven experience provisioning, managing, and upgrading GKE clusters
• Strong Terraform skills
• Hands-on Argo CD (GitOps) and Helm experience
• Solid working knowledge of Google Cloud Platform IAM, service accounts, and Workload Identity Federation
• Experience with GKE RBAC, Kubernetes network policies, and Google Cloud Platform VPC and firewall
configuration
• Production experience with Istio, Kubernetes Operators and CRDs, and cert-manager
• Experience with admission controllers and policy enforcement
• Experience with cluster autoscaling and observability tooling
• Ability to work in a security- and risk-conscious regulated environment
Nice to Have
Broader Google Cloud Platform service knowledge
• GitHub Actions (CI/CD)
• Golang, especially for writing operators and controllers
• CKA, CKAD, or CKS; Google Professional Cloud Architect or Cloud DevOps Engineer
• Multi-cloud or hybrid exposure (AWS, Azure, OpenShift)
• SRE practices: SLOs, incident response, and chaos engineering
• Financial services or other regulated-industry experience
senior-level ownership of production Google Cloud Platform and GKE environments [VERIFY whether 7+ is total
experience or Kubernetes/GKE-specific]
• Mandatory: hands-on production experience with Google Cloud Platform
• Proven experience provisioning, managing, and upgrading GKE clusters
• Strong Terraform skills
• Hands-on Argo CD (GitOps) and Helm experience
• Solid working knowledge of Google Cloud Platform IAM, service accounts, and Workload Identity Federation
• Experience with GKE RBAC, Kubernetes network policies, and Google Cloud Platform VPC and firewall
configuration
• Production experience with Istio, Kubernetes Operators and CRDs, and cert-manager
• Experience with admission controllers and policy enforcement
• Experience with cluster autoscaling and observability tooling
• Ability to work in a security- and risk-conscious regulated environment
Nice to Have
Broader Google Cloud Platform service knowledge
• GitHub Actions (CI/CD)
• Golang, especially for writing operators and controllers
• CKA, CKAD, or CKS; Google Professional Cloud Architect or Cloud DevOps Engineer
• Multi-cloud or hybrid exposure (AWS, Azure, OpenShift)
• SRE practices: SLOs, incident response, and chaos engineering
• Financial services or other regulated-industry experience
Similar jobs
- IN
Splunk Platform EngineerRecently posted
Innova · Charlotte, North Carolina · Hybrid 🇺🇸
SplunkLinuxTechnologySalary not listed - DS

DevOps Engineer (Req #: 30406) with Security ClearanceRecently posted
DataHaven Solutions INC · Fort Meade, MD · Hybrid 🇺🇸
GitAWSAnsible+11Technology$150k - $185k/yr - MS

AWS DevOps ArchitectRecently posted
Marici Solutions · Alameda, CA · Hybrid 🇺🇸
GitAWSGitHub Actions+3TechnologySalary not listed - SY

Lead Middleware Platform EngineerRecently posted
SysMind, LLC · Montreal, QC · Hybrid 🇺🇸
ShellAnsibleBash+4TechnologySalary not listed - IN

Cloud Platform EngineerRecently posted
Inceed · Oklahoma City, OK · On-site 🇺🇸
AWSAnsibleBash+7Technology$120k - $125k/yr - AI
Senior DevOps Lead / ArchitectRecently posted
AKSHAR IT SOLUTIONS LLC · King of Prussia, PA · On-site 🇺🇸
Stakeholder ManagementGitAWS+6TechnologySalary not listed - P2

Senior DevOps Engineer – Trading & SupplyRecently posted
P2PSoftTek Inc · Houston, TX · On-site 🇺🇸
SQLTCP/IPC#+2TechnologySalary not listed - AI
Senior DevSecOps Engineer with Security ClearanceRecently posted
Aqua IT · Dulles, VA · Hybrid 🇺🇸
ScrumJiraAgileEngineeringSalary not listed - DS

DevOps Engineer (Req #: 30762) with Security ClearanceRecently posted
DataHaven Solutions INC · San Antonio, TX · Hybrid 🇺🇸
GitAWSAnsible+12Technology$100.2k - $130k/yr - AG

Versa SD-WAN Platform EngineerRecently posted
ASCII Group LLC · Ashburn, VA · On-site 🇺🇸
AWSGoogle CloudPostman+2Technology$48/hr - IG

DevSecOps Engineer with Security ClearanceRecently posted
Insight Global, Inc. · Colorado Spgs, CO · On-site 🇺🇸
EngineeringSalary not listed - TT
Lead Business Analyst (User Stories / DevOps / Change Management)Recently posted
TRIGYN TECHNOLOGIES, INC. · Baltimore, Maryland · Hybrid 🇺🇸
TechnologySalary not listed