Thales

OpenSky Architect

Thales
Aerospace & DefenseSingaporeOnsitePosted 4 weeks ago

About the role

AI summarised

The OpenSky Architect will design and secure large‑scale Kubernetes deployments across hybrid and multi‑cloud environments, driving automation, observability, and compliance. The role involves leading an agile squad, collaborating with cloud and security teams, and mentoring engineers on best practices.

Aerospace & DefenseOnsite

Key Responsibilities

  • Design and document scaled Kubernetes deployments across multiple clusters, availability zones, and cloud providers
  • Define scalability, high availability and disaster recovery (DR) strategies for mission‑critical workloads
  • Integrate cybersecurity best practices into Kubernetes architecture, including RBAC, Pod Security Standards, network policies and supply chain security
  • Build and maintain self‑service platform for developers with golden paths for CI/CD, observability, and IaC using Terraform, Helmfile, and ArgoCD
  • Establish monitoring, logging, and tracing using Prometheus, Grafana, Loki, and OpenTelemetry
  • Define governance policy, upgrade roadmap for Helm charts, operators, CRDs, service meshes and observability stack
  • Partner with Cloud, DevSecOps and Application Teams to deliver secure, production‑ready Kubernetes clusters
  • Mentor engineering teams on Kubernetes design patterns, scaling strategies and secure coding practices

Requirements

  • Bachelors in Computer Science, Information Technology or recognized Engineering degree
  • At least 7 years of experience in distributed systems, cloud‑native platforms or DevOps
  • At least 4 years designing and operating Kubernetes clusters
  • Strong experience with Linux, container runtimes (Docker, Kaniko) and networking (Cilium, Calico, Multus)
  • Strong experience in identity and access management, cloud security models, encryption and compliance frameworks
  • Familiarity with threat modelling, penetration testing, vulnerability management and SOC practices
  • Experience with security tools such as Trivy, Aqua Security or Sysdig
  • Relevant certifications such as CKA, CKSS or CKAD