Azure Kubernetes Engineer

 Infrastructure as Code (IaC) & Azure Automation

. Design, build, and maintain Azure infrastructure using Bicep templates.
. Automate provisioning of: Key Vault (secrets, keys, certificates) User Assigned Managed Identities (UAMI) Storage Accounts for backup, snapshots, and archival Log Analytics Workspace and Application Insights Disk Encryption Sets and encryption key management
. Implement SecretProviderClass for CSI driver integration with AKS.
. Enforce governance, tagging, and policy compliance through IaC.


2. Kubernetes Resource Management (AKS) (Mandatory)
Design, deploy, and manage Kubernetes resources following GitOps and best practices:
Core Kubernetes Resources

. Deploy and manage: Deployments, StatefulSets, DaemonSets ReplicaSets ConfigMaps, Secrets, ServiceAccounts PersistentVolumes (PV) and PersistentVolumeClaims (PVC) Horizontal Pod Autoscalers (HPA) and Pod Disruption Budgets (PDB)
. Implement liveness, readiness, and startup probes for workload reliability.
. Manage Services (ClusterIP, NodePort, LoadBalancer) and Ingress resources.

Security & Identity

. Configure RBAC, IAM, Azure AD workload identities, and pod identity.
. Implement Network Policies, namespace isolation, and secure multi-tenancy.
. Manage Secrets using Key Vault + CSI driver.

Networking & Traffic Management

. Deploy and manage Ingress controllers (NGINX).
. Configure NSGs, private endpoints, and secure cluster networking.
. Implement internal/external load balancing and traffic routing.

Cluster Operations

. Manage node pools, autoscaling, taints, tolerations, and scheduling strategies.
. Perform upgrades, patching, and cluster lifecycle management.
. Troubleshoot cluster, node, and workload-level issues.


3. DevOps, CI/CD & Containerization

. Build optimized container images using Docker.
. Manage artifact repositories such as Nexus Artifactory.
. Implement CI/CD pipelines using Azure DevOps: Service connections Helm chart packaging and deployment to AKS


4. Monitoring, Logging & Observability

. Configure: Log Analytics Workspace Application Insights Azure Monitor for containers Prometheus/Grafana
. Build dashboards, alerts, monitoring for workloads and infrastructure.


5. Security, Governance & Compliance

. Implement Azure RBAC, IAM, and least-privilege access models.
. Manage Key Vault, secret rotation, and encryption standards.
. Enforce network segmentation, NSGs, and firewall rules.
. Ensure compliance with enterprise security and audit requirements.


Required Skills & Experience

. Strong hands-on experience with Azure and AKS.
. Expertise in Bicep or ARM templates.
. Deep understanding of Kubernetes resources and cluster operations.
. Strong knowledge of Key Vault, UAMI, Storage, Networking, NSGs.
. Experience with Docker, Helm, and container lifecycle management.
. Experience with CI/CD pipelines, service connections, and artifact repositories.
. Strong understanding of RBAC, IAM, network policies, and workload identities.
. Excellent troubleshooting skills across Linux, Kubernetes, and Azure.