Associate Principal - System Management

Associate Principal - System Management

Container Kubernetes Hybrid EKS Administrator JD

Must Have Good to Have

Role Focus 80 Containers Kubernetes EKS automation 20 legacy application hosting middleware support

Technologies Docker container runtime Kubernetes Amazon EKS Hybrid EKS Helm ArgoCD GitOps Linux WebSphere Liberty Apigee API gateway

Tools kubectl eksctl AWS CLI Git JIRA Confluence ServiceNow Postman

Methodology Agile ITIL IncidentChangeProblem management SRE operational excellence mindset

Automation IaC Helm charts ArgoCD sync rollback Terraform Ansible CICD pipeline integration

Scripting Shell scripting Python basics YAML authoring and troubleshooting

Cloud AWS EKS IAM RBAC VPC networking DNS routing SSM Roles Anywhere concepts CloudWatch observability

Containers Orchestration Image build and lifecycle Pods Deployments StatefulSets DaemonSets Services Ingress DNS ConfigMaps Secrets PV PVC StorageClass Network Policies Autoscaling

Legacy Application Hosting WebSphere Liberty runtime support JVM monitoring heapthread dumps certificate management OS patching coordination

Responsibilities

Administer Kubernetes EKS environments including cluster access namespaces workload deployment scaling and day2 operational support

Build deploy upgrade rollback and troubleshoot workloads using Docker images Kubernetes manifests Helm charts and GitOpsArgoCD patterns

Perform L3 troubleshooting across pods services ingress DNS networking secrets storage node health scheduling failures and failed releases

Support Hybrid EKS operations including onprem worker node onboarding node labelingtaints workload placement connectivity validation and health checks

Partner with application teams to modernize legacy workloads from VMmiddleware hosting to containerized deployment models with clear migration readiness inputs

Implement secure operating practices across IAM RBAC least privilege access secrets handling certificate lifecycle patching and vulnerability remediation

Drive observability through logs metrics s health dashboards and incident learnings to reduce operational risk and improve platform reliability

Use automation through ShellPython Helm Terraform Ansible and CICD integration to reduce manual effort and improve repeatability

Provide oncall support for priority incidents and contribute to RCA corrective preventive actions audit evidence and operational runbooks

Maintain working knowledge of legacy middleware such as WebSphereLiberty and Apigee to support transitionstate operations and hybrid hosting needs

Key Capability Expectations Based on Hybrid EKS Orchestration Support

Strong understanding of the evolution from VM hosting to containers including practical differences between VM and container operating models

Handson ability to build container images manage image lifecycle handle container storagenetworking and troubleshoot runtimelevel issues

Good command over Kubernetes architecture control plane worker node flow APIdriven desired state model and core components such as API server scheduler etcd kubelet and kubeproxy

Ability to write and troubleshoot Kubernetes YAML for pods deployments services ConfigMaps Secrets StatefulSets DaemonSets PVPVC and StorageClass

Working knowledge of Kubernetes networking include CNI concepts DNS service discovery pod communication routing firewall considerations and network policies

Handson Amazon EKS Hybrid EKS administration including IAMRBAC mapping host preparation hybrid node onboarding node registration labeling taints and workload placement

Ability to operate productiongrade clusters with logging monitoring health checks failover validation security controls and production readiness practices

Practical experience with Helm release management and ArgoCD GitOps concepts including install upgrade rollback sync and automation patterns

Expected Experience Profile

10 years of infrastructure middleware application hosting experience with strong handson movement toward Kubernetes containers and AWSEKS operations

Experience supporting production platforms with incident change patching vulnerability management audit and service request ownership

Should be comfortable working in a hybrid model where legacy hosting knowledge is still needed but primary delivery focus is modern container platform operations

Prior exposure to WebSphere Liberty Apigee API troubleshooting TLS certificates Linux administration will be useful for transitionstate support

Qualities

Strong ownership mindset with ability to independently drive operational issues to closure

Good communication able to explain technical issues clearly to application teams service owners and leadership