Senior Azure Kubernetes Engineer (Karnataka)

Position Description: #LI-MS1 Company Profile: Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn . Job Title: Senior Azure Kubernetes Engineer Position: L2 Experience:9+ yrs Category: IT Infrastructure Main location: Bangalore/Chennai/Pune/Mumbai Position ID: J0226-1926 Employment Type: Full Time Qualification: Bachelor's degree in Computer Science or related field or higher with minimum 3 years of relevant experience. Job Description: Role Overview Job Description Azure Kubernetes Platform Engineer Overview We are looking for an experienced Azure Kubernetes Platform Engineer (6-9 yrs) with expertise in Azure, AKS, Kubernetes resource management, IaC, and DevOps automation. The ideal candidate operate secure, scalable, and production-grade cloud platforms using Azure-native services, Bicep, and up-to-date CI/CD practices. This role requires expertise in openshift platform. Key Responsibilities 1. Infrastructure as Code (IaC) & Azure Automation . Design, build, and maintain Azure infrastructure using Bicep templates. . Automate provisioning of: Key Vault (secrets, keys, certificates) User Assigned Managed Identities (UAMI) Storage Accounts for backup, snapshots, and archival Log Analytics Workspace and Application Insights Disk Encryption Sets and encryption key management . Implement SecretProviderClass for CSI driver integration with AKS. . Enforce governance, tagging, and policy compliance through IaC. 2. Kubernetes Resource Management (AKS) (Mandatory) Design, deploy, and manage Kubernetes resources following GitOps and best practices: Core Kubernetes Resources . Deploy and manage: Deployments, StatefulSets, DaemonSets ReplicaSets ConfigMaps, Secrets, ServiceAccounts PersistentVolumes (PV) and PersistentVolumeClaims (PVC) Horizontal Pod Autoscalers (HPA) and Pod Disruption Budgets (PDB) . Implement liveness, readiness, and startup probes for workload reliability. . Manage Services (ClusterIP, NodePort, LoadBalancer) and Ingress resources. Security & Identity . Configure RBAC, IAM, Azure AD workload identities, and pod identity. . Implement Network Policies, namespace isolation, and secure multi-tenancy. . Manage Secrets using Key Vault + CSI driver. Networking & Traffic Management . Deploy and manage Ingress controllers (NGINX). . Configure NSGs, private endpoints, and secure cluster networking. . Implement internal/external load balancing and traffic routing. Cluster Operations . Manage node pools, autoscaling, taints, tolerations, and scheduling strategies. . Perform upgrades, patching, and cluster lifecycle management. . Troubleshoot cluster, node, and workload-level issues. 3. DevOps, CI/CD & Containerization . Build optimized container images using Docker. . Manage artifact repositories such as Nexus Artifactory. . Implement CI/CD pipelines using Azure DevOps: Service connections Helm chart packaging and deployment to AKS 4. Monitoring, Logging & Observability . Configure: Log Analytics Workspace Application Insights Azure Monitor for containers Prometheus/Grafana . Build dashboards, alerts, monitoring for workloads and infrastructure. 5. Security, Governance & Compliance . Implement Azure RBAC, IAM, and least-privilege access models. . Manage Key Vault, secret rotation, and encryption standards. . Enforce network segmentation, NSGs, and firewall rules. . Ensure compliance with enterprise security and audit requirements. Required Skills & Experience . Strong hands-on experience with Azure and AKS. . Strong openshift experience. . Expertise in Bicep or ARM templates. . Deep understanding of Kubernetes resources and cluster operations. . Strong knowledge of Key Vault, UAMI, Storage, Networking, NSGs. . Experience with Docker, Helm, and container lifecycle management. . Experience with CI/CD pipelines, service connections, and artifact repositories. . Strong understanding of RBAC, IAM, network policies, and workload identities. . Excellent troubleshooting skills across Linux, Kubernetes, and Azure. Behavioural Competencies : Proven experience of delivering process efficiencies and improvements Clear and fluent English (both verbal and written) Ability to build and maintain efficient working relationships with remote teams Po