Job Description:
Position Summary
CTI Azure Data Platform (CAP) Cloud team is looking for a talented Azure Kubernetes Engineer with 3-4 years of container deployment experience to provide hands-on implementation, guidance, operational support, and design best practices to enable application workloads to run seamlessly on Azure Kubernetes Service (AKS).
The individual will support LOB teams and CAP clients in designing, deploying, and operating their workloads on AKS and eventually enable CI-CD native pipelines on Azure.
The candidate will lead efforts on AKS Bootstrapping, build, configuration, security enforcement, deployment and operational support for AKS clusters, nodes, and pods to expand out CAP Platform as a Service for time to market and efficiency gains.
Key responsibilities include:
*Execute published roadmap for AKS Minimum Viable Product (MVP), configuring and operating the application workloads on AKS in alignment with GIS baselines
* Work as AKS Administrator, and support AKS infrastructure, ensuring it is secure, resilient, high performance PaaS platform
* Build automated deployment templates that customers can easily use to roll out their own instances of AKS.
* Execute bank information security/ NIST 5 standards when deploying bank and third party container images from Azure native registry
* Configure, Deploy, and Support Bank workloads to securely run and operate AKS seamlessly
* Manage and support Azure DevOps build and release pipeline, set up new repos, integrate CI/CD into development life cycle.
* Gather new requirements with LOBs, product owner and create tasks in the backlog, help to prioritize maturity evolution of AKS PaaS
* Configure V-nets, Encryption and security on Azure using ARM templates and PowerShell scripts to automate AKS provisioning
* Implement cluster services using AKS to manage local deployments by building a self-hosted k8 cluster using Jenkins CI/CD pipeline.
* Enable AKS application, event, cluster, user activity, and diagnostic logs into Azure Event Hub/Storage and then into BofA Splunk for monitoring
* Manage and support Azure DevOps build and release pipeline, set up new repos, integrate CI/CD into development life cycle.
* Integrate ARM Templates with centralized services (AquaSec, ACR) to implement enforceable solutions (eg., disable older than version N-2) on AKS
* Generate customer facing documentation for onboarding into AKS e.g. - Steps required for how to use automated deployment
* Assess the needs of managed identities, Service principals, certificates or forms authentication
Required Skills
* 2 years of Azure engineering experience in design, development and deployment of Azure cloud solutions in a fast paced environment
* Development and implementation skills on AKS hosted solutions, Replica sets, Scheduler, and load balancing
* Hands on technology experience setting up Kubernetes build pipelines, Bootstrapping Scripts, Yaml Manifest files, Image Scanning & Registry Pulls
* Must be able to manually scale as well as deploy and configure Horizontal pod autoscaler (HPA), Cluster autoscaler, and integrate Azure Container Instance (ACI)
* Authentication, authorization knowledge base to control User and machine access to Kubernetes clusters
* Prior experience with Helm charts for package deployment manager to use charts and templates for files
* Independent deployment of Pod security policies (PSP) in AKS cluster to comply with GIS standards, enable Node to Node encryption
* AquaScan and role-based access control policy system for AKS to scan, monitor events, runtime, vulnerabilities, images, Hosts, Registry
* HTTPS Ingress controller and AKS TLS cert management for configurable traffic routing for individual Kubernetes services.
* 3 years in Docker/Open Shift/AKS container to quickly develop, host and scale applications in a self-manage cloud environment.
* 2 years experience building automation pipeline/CD via Jenkins and Ansible Playbooks to automate Ansible Servers using YAML scripting
* Hands-on & manage containerized applications using its node, Config Maps, selector, services and deploy application containers as Pods.
* Previously deployed Linux and/or windows K8 cluster with Azure Container Service (ACS) from Azure CLI and used K8 for runtime environment of the CI/CD
* Working knowledge of NIST security policies and standards, FedRamp, CSA, and ISO cloud and container standards.
* Familiarity with 12 factor applications, cloud workload management design patterns
* Prior experience on Deployment Automation of workloads, pull image from Private ACR registry and deploy to AKS Cluster.
* Expertise in creating Multiple Ansible playbooks for auto-provisioning of AKS test environments and auto deployment of artifacts.
* Terraform, Jenkins, Octopus, Ansible, Jira, Confluence, Bitbucket, PowerShell Windows, IIS, Shell Script, Python, Linux
Desired Skills
*AZ-400 DevOps Certified Engineer Experience creating AKS pipeline for deployment & operation activities where all code is written in java, python & stored into bitbucket, for staging & testing purpose.
*Application Server setup, stack monitoring using Ansible Playbooks using Jenkins.Docker/OpenShift/AKS container service orchestration.
*Knowledge of Monitoring policy and standard updates within BoFA Expertise on Creating Multiple Ansible playbooks for auto-provisioning of test environments .
*Agile experience, Product backlog and other scrum activities in collaboration with the team.
*Proficient in documentation works, Requirement Specification (RS) and Test Case Preparation.
Shift:
1st shift (United States of America)
Hours Per Week:
40