Platform Architect

Your mission:

• Own the architecture of production-grade Kubernetes platforms — managed and on-premises/bare-metal — spanning multi-environment and multi-cluster topologies, networking, storage, and the security baseline.

• Define reference architectures, platform standards, and upgrade/lifecycle strategy that engineering teams implement and operate.

• Architect advanced cluster networking, including the CNI (Cilium), ingress and load balancing, and BGP-based routing and peering for on-premises and bare-metal environments.

• Set the infrastructure-as-code and GitOps operating model — Terraform/OpenTofu module strategy, Argo CD or Flux, and Helm/Kustomize standards — so platform state is declarative, auditable, and reusable.

• Define observability, resilience, and scaling strategy — monitoring, backup and disaster recovery, autoscaling, and capacity planning.

• Own the security architecture: RBAC, Pod Security Standards, network policies, secrets management, image and policy guardrails, and governance.

• Lead client advisory, workshops, and training, acting as the senior technical authority and trusted advisor in engagements.

• Provide architectural escalation and design guidance to Platform Engineers on the platforms and infrastructure delivered.

• Shape our AI-infrastructure direction — model serving, GPU scheduling, and ML platform patterns on Kubernetes.

• Mentor engineers and grow platform capability, bringing relevant cloud-native practices back to the team.

Your profile:

• Deep Kubernetes expertise — cluster architecture, workloads, scheduling, RBAC, networking (CNI, with hands-on Cilium experience), and storage (CSI) — at a design and architecture level.

• Proven platform-architecture track record — designing production Kubernetes platforms and reference architectures across managed and on-premises/bare-metal, with at least one production distribution such as OpenShift or Rancher (RKE2).

• Advanced networking — TCP/IP, DNS, routing, firewalls, load balancing, Kubernetes ingress, and BGP-based routing and peering for on-premises and bare-metal.

• Infrastructure as code & GitOps mastery — Terraform/OpenTofu, Helm or Kustomize, CI/CD pipelines, and GitOps (Argo CD or Flux).

• Security architecture & governance — designing RBAC, Pod Security Standards, network policies, secrets management, and policy guardrails.

• Consulting & leadership — leading workshops, advisory, and stakeholder management, and mentoring engineers.

• Documentation — excellent writing skills across formats (architecture documents, slides, emails, etc.).

• Languages — fluency in English is required; French is a strong plus.