Senior Kubernetes Infrastructure Developer

Sigma Defense is seeking a Senior Kubernetes Infrastructure Developer to be a Kubernetes platform engineer and infrastructure developer, not simply a user of Kubernetes. This individual should understand what is happening beneath the application layer and be comfortable taking technical ownership from the Azure infrastructure and network supporting the cluster through AKS configuration, networking, identity, security, deployment automation, observability, and lifecycle management. The ideal candidate believes Kubernetes infrastructure should be built through code, version controlled, automated, repeatable, secure, and recoverable. Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Requirements 8+ years of relevant experienceSignificant professional experience designing, deploying, and operating Kubernetes environmentsStrong hands-on experience with Microsoft Azure and Azure Kubernetes Service (AKS)Deep understanding of Kubernetes architecture, including nodes, pods, deployments, services, namespaces, ingress, configuration, secrets, and storageExperience designing and operating production Kubernetes clusters supporting enterprise workloadsStrong experience with Infrastructure as Code and automated infrastructure deploymentHands-on experience with Terraform, Bicep, Helm, and Kubernetes manifestsExperience developing and maintaining Helm chartsStrong understanding of Kubernetes networking and integration with Azure networking servicesExperience implementing Kubernetes identity, authentication, authorization, and RBACExperience integrating Kubernetes environments with Microsoft Entra ID and Azure identity technologiesExperience with container security and secure cluster configurationExperience implementing automated Kubernetes deployments using CI/CD or GitOps methodologiesStrong scripting and automation skills using PowerShell, Python, Bash, Azure CLI, or similar toolsMust be a U.S. citizen Candidate Differentiators: Experience designing and operating Azure Government AKS environmentsExperience supporting Kubernetes platforms within a Department of Defense (DoD) or other highly regulated environmentExperience designing private AKS clusters and secure network architecturesExperience with Azure CNI, network policies, and advanced container networkingExperience with Azure Key Vault, workload identity, managed identities, and secure secrets-management patternsExperience with Azure Policy for Kubernetes and Microsoft Defender for ContainersExperience with Flux or Argo CDExperience with Azure Container Registry (ACR)Experience with OPA Gatekeeper, Kyverno, or comparable policy technologiesExperience with Azure Monitor, Log Analytics, Prometheus, Grafana, or comparable observability platformsExperience with container image security, vulnerability scanning, and software supply-chain securityFamiliarity with Zero Trust architecture, DoD RMF, NIST SP 800-53, and STIGs Mandatory Certifications: CompTIA Security+Certified Kubernetes Administrator (CKA)Azure Administrator Associate: AZ-104 Computer Programs/Software: Azure Kubernetes Service (AKS)TerraformBicep Personnel Clearance Level: Candidate must possess or have the ability to obtain an active TS/SCI security clearanceClearance may be sponsored for the right candidate Education Requirements: Bachelor's degree from an accredited college or university in Computer Science or related field of study. Essential Job Duties (not all-inclusive): Design, build, configure, and maintain enterprise Kubernetes infrastructure within Microsoft Azure, with a primary focus on Azure Kubernetes Service (AKS)Serve as a senior technical resource for Kubernetes platform architecture, infrastructure automation, cluster configuration, and troubleshootingDesign scalable and resilient AKS architectures supporting mission-critical applications and servicesAutomate provisioning and lifecycle management of AKS clusters and supporting Azure infrastructureDevelop reusable Infrastructure as Code modules and deployment patterns using Terraform, Bicep, Helm, and Kubernetes manifestsDevelop automated deployment and configuration processes using GitOps and CI/CD methodologiesDesign and implement Kubernetes networking, ingress, service discovery, load balancing, and connectivity to other Azure resourcesIntegrate AKS with Azure Virtual Networks, Private Endpoints, Private DNS, Azure Firewall, Application Gateway, Load Balancer, and other Azure networking servicesDesign and implement secure private AKS architecturesImplement Kubernetes RBAC and integrate cluster access with Microsoft Entra ID and Azure identity servicesImplement workload identity, managed identities, secrets management, and secure access to Azure resourcesIntegrate Kubernetes environments with Azure Key VaultDevelop and maintain Helm charts, reusable platform configurations, and standardized deployment patternsIntegrate AKS with Azure Policy, Microsoft Defender for Cloud, and Defender for ContainersImplement logging, monitoring, metrics, and alerting using Azure Monitor, Log Analytics, Container Insights, and related technologiesDesign platform capabilities supporting high availability, resiliency, scaling, backup, recovery, and cluster lifecycle managementMentor junior and mid-level engineers and provide technical guidance Salary Range: $135,000 - $165,000 annually. Benefits Dental and Vision InsuranceMedical Insurance to Include HSA, FSA, and DFSA PlansLife and AD&D coverageEmployee Assistance Program (EAP)401(k) Plan with Company Matching Contributions160 Hours of Paid Time Off (PTO) 12 (Floating) HolidaysEducational AssistanceHighly Competitive Salary