Kubernetes expert

Make retail great again through the power of technology! Intellias helps retailers provide consistent and customer-centric shopping experiences across all channels with disruptive retail tech solutions. Get on board and make your own contribution to the industry!

Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion of consumers around the globe.

Requirements:

• AWS EKS – managed clusters with Karpenter, ALB ingress, IAM integration, and cost-optimized workloads
• Azure AKS – enterprise environments with Azure AD SSO, CSI, and autoscaling
• Google GKE – workload identity integration and resource-optimized build pipelines
• OpenShift (on-prem/cloud) – hands-on experience with 3.x and 4.x clusters, including cluster operators and lifecycle management
• Rancher – hybrid-cloud environments with centralized policy enforcement and workload monitoring
• Tooling & Ecosystem
• Argo Ecosystem (end-to-end GitOps):
• Argo CD – declarative multi-env deployments using the app-of-apps pattern
• Argo Workflows – Kubernetes-native CI workflows for build/test/deploy
• Argo Rollouts – blue/green, canary, and progressive delivery strategies with Istio
• Argo Events – GitOps-driven event triggers for reactive pipelines
• Helm (custom charts, chart libraries, deployment templating)
• Kustomize – environment overlays for infra-as-code
• Vault + external-secrets – secure secrets delivery via Kubernetes controllers
• Autoscaling & Efficiency
• KEDA – event-driven autoscaling from custom metrics (Kafka, Prometheus, RabbitMQ, etc.)
• Karpenter – next-gen cluster autoscaler for dynamic provisioning of spot/on-demand nodes
• HPA & VPA – fine-grained pod-level autoscaling based on CPU/memory or custom metrics
• Cluster Autoscaler (legacy, tuned for GKE & AKS before migrating to Karpenter)
• Security & Policy
• cert-manager – ACME automation and self-signed certificate issuance
• OPA/Gatekeeper – policy-as-code for image whitelisting, label enforcement, resource limits
• Istio – service mesh for secure service-to-service communication (mTLS, JWT auth, traffic shifting)
• Hardened workloads via PodSecurityContext, AppArmor/Seccomp profiles
• Monitoring & Observability
• Prometheus, Grafana, Loki, Alertmanager – full metrics and log stack per namespace/env
• Jaeger + OpenTelemetry – distributed tracing and performance monitoring
• Fluent Bit, Elasticsearch, Kibana – centralized logging pipelines
• Readiness/liveness probes and SLO-based alerting
• Key Projects & Achievements
• Designed and built a fully GitOps-native deployment platform using the complete Argo stack integrated with Vault, KEDA, and custom Helm charts
• Migrated 30+ legacy apps from Docker Swarm and VM-based environments to Kubernetes with minimal downtime
• Implemented progressive delivery using Argo Rollouts + Istio for safe and reversible changes
• Built dynamic dev/test preview environments using DevSpace and Argo Events
• Enabled secure workload identity and multitenancy across EKS and GKE clusters

Responsibilities:

• Design, build, and maintain software delivery pipelines and infrastructure that support continuous integration, delivery, and deployment.
• Collaborate with development and operations teams to ensure that software is delivered with high quality, speed, and reliability.
• Automate manual processes, such as testing, deployment, and monitoring, to improve efficiency and reduce errors.
• Develop and maintain monitoring and alerting systems to proactively identify and address issues in production environments.
• Troubleshoot production issues, conducting root cause analysis and implementing remediation plans.
• Manage and scale infrastructure resources, such as servers, databases, and cloud services, to ensure optimal performance and cost-effectiveness.
• Implement security best practices and ensure compliance with industry standards and regulations.
• Continuously learn and keep up to date with new technologies and industry trends to improve system performance, security, and efficiency.