Position: k8s engineer
Company: Stan's Assets
Experience required: 3y
English level: upper

The successful candidate will develop and maintain multiple Kubernetes based PaaS solutions at different classification levels, automate deployment of services, provide documentation, and monitor security and performance of the platform and deployed services. Our DevOps engineers are asked to solve challenging problems for unique customers and have a direct impact on the direction of software products and solutions used by those customers.

**Key Responsibilities:**
- Deploy and maintain critical services supporting both on-prem and cloud-native architecture
- Work with the Cybersecurity team by implementing industry best practices for system hardening and configuration management
- Use automation best practices, such a IaC and GitOps, for repeatability and fast provisioning of environments
- Deploy and maintain Kubernetes platforms in multiple environments and classification levels
- Work closely with development teams to provide onboarding support
- Ensure platform and networks are compliant with DoD policies
- Support backup and disaster recovery planning

**Required Qualifications:**
- 3+ years of relevant experience
- Experience managing and working with Linux and MacOS
- Comfortable working on command line and scripting on multiple OS platforms
- Experience configuring, deploying, and securing Kubernetes platforms

**Desired Qualifications:**
- Bachelor’s Degree in Computer Science, Engineering, or related field
- Scripting experience including at least a subset of the following: Bash, Python, Zsh, AppleScript, Terraform, Ansible, Puppet, Chef
- Experience with deploying and maintaining CNCF products to on-prem and cloud environments
- Experience developing and maintaining CI/CD pipelines on cloud platforms including AWS, Azure, or GCP
- Experience with CI/CD automation servers including GitLab CI, Jenkins, or CircleCI
- Experience and/or familiarity with security scanning tools such as SonarQube, OWASP-DC, Anchore, Claire, OPA, Fortify, Checkmarx, Synk, and OpenSCAP
- Experience with providing Identity Management services including SSO using OpenID Connect (OIDC) or SAML