Role Overview

We are seeking a highly experienced Principal DevOps Engineer to drive platform engineering and modern infrastructure initiatives across on-premises and cloud environments.

This is an individual contributor role requiring deep hands-on expertise in bare-metal Kubernetes environments, Azure Kubernetes Service (AKS), CI/CD automation, and modern DevOps tooling. The role also includes ownership of CI/CD platform evolution, Jenkins lifecycle management, platform reliability, tool upgrades, and disaster recovery strategies.

Key Responsibilities

- Architect, build, and maintain Kubernetes clusters across bare-metal (kubeadm, Rancher) and Azure (AKS)
- Design scalable, resilient platform infrastructure
- Build and maintain CI/CD pipelines using Jenkins (Groovy) and GitHub Actions
- Own Jenkins lifecycle: upgrades, patching, plugin management, migration/modernization
- Manage GitHub/GitHub Cloud repositories and workflows
- Ensure timely upgrades of DevOps tools, platforms, and dependencies
- Define and implement disaster recovery (DR), backup, and high availability strategies
- Implement Infrastructure as Code (IaC) practices for provisioning and configuration
- Ensure security, reliability, and performance of systems
- Troubleshoot complex distributed system and networking issues
- Collaborate with engineering teams for cloud-native adoption
- Drive DevOps best practices and platform standardization

Required Skills & Experience

Kubernetes:
- Strong experience with bare-metal Kubernetes (kubeadm, Rancher)
- Hands-on AKS expertise
- Deep knowledge of Kubernetes architecture and lifecycle

CI/CD & Automation:
- Expert in Jenkins (pipelines, Groovy)
- Experience with Jenkins upgrades, migrations, plugin dependency management
- Strong GitHub Actions experience
- GitHub / GitHub Cloud expertise

Infrastructure:
- Strong Azure knowledge
- Experience with hybrid environments
- Strong Infrastructure as Code (Terraform/ARM/Bicep or equivalent)

Networking:
- Kubernetes networking (CNI plugins such as Calico, Flannel, Cilium)
- Ingress controllers (NGINX, Traefik, Azure Application Gateway Ingress Controller)
- Load balancing (L4/L7, internal/external, MetalLB for bare-metal environments)
- Strong understanding of cluster networking models (pod-to-pod, pod-to-service communication)
- DNS management (CoreDNS, service discovery, external DNS integration)
- TLS/SSL fundamentals (certificate management, rotation, mTLS concepts)
- Network policies and segmentation (Kubernetes Network Policies for security)
- Hybrid networking (on-prem ↔ Azure connectivity: VPN, ExpressRoute)

Preferred Qualifications

- Experience with observability tools (Prometheus, Grafana, ELK)
- Experience with GitOps (ArgoCD / Flux)
- Kubernetes or Azure certifications
- Experience modernizing CI/CD platforms
- Exposure to disaster recovery planning and execution

Nice to Have

- AI/ML implementation in DevOps (AIOps, intelligent automation, pipeline optimization)
- Service mesh (Istio, Linkerd)
- Platform engineering experience

Key Traits

- Strong ownership mindset
- Deep technical hands-on expertise
- Ability to work independently as a principal IC
- Excellent troubleshooting skills
- Strong communication skills

RSA is committed to the principle of equal employment opportunity for all employees and applicants for employment and to providing employees with a work environment free of discrimination and harassment. All qualified applicants will receive consideration for employment without regard to race, color, and any other category protected by applicable country law.

If you need a reasonable accommodation during the application process, please contact the RSA Talent Acquisition Team at [email protected]. RSA and its approved consultants will never ask you for a fee to process or consider your application for a career with RSA. RSA reserves the right to amend or withdraw any job posting at any time, including prior to the advertised closing date.