Principal Systems Architect II

Overview

Vous envisagez de postuler à cet emploi ? Vérifiez tous les détails dans cette description de poste, puis cliquez sur "Postuler".

This is more than a job.It’sa chance to build, grow, andmake a real impact

Join our team as our new Principal Systems Architect.

Responsibilities

Build & Deploy

• Build and configure Kubernetes environments (AKS, EKS, OpenShift) for Axway products following approved reference architectures and standards.

• Deploy and configure MFT products (Secure Transport or equivalents) on Kubernetes using the supplied Helm charts, manifests and runbooks.

• Implement ingress, load balancing, storage, network policies and static egress/IP allow-listing needed for protocol workloads (SFTP, FTPS, AS2, PeSIT, HTTPS).

• Validate scripts, charts and documentation for new products and versions in lower environments and report readiness gaps before production release.

Automation & CI/CD

• Develop and maintain Terraform code, Helm values and pipelines (Jenkins, GitHub Actions or GitLab CI) within the established IaC and GitOps framework.

• Automate repetitive operational tasks: upgrades, certificate renewals, secrets rotation, health checks and environment configuration.

• Contribute to the Automation team's backlog and improve build-time and reliability of onboarding.

Operations & Support

• Operate production and pre-production clusters: monitoring, patching, upgrades, scaling and capacity management within defined SLAs.

• Act as L3 technical responder for platform incidents; contribute to P1/P2 restoration and write RCAs with corrective actions.

• Implement and tune dashboards, alerts and log collection (Prometheus, Grafana, Splunk, Dynatrace, Sentinel or similar) to the agreed monitoring standard.

• Implement cost and capacity recommendations (right-sizing, autoscaling, resource clean-up) and report results.

• Take part in the after-hours support rotation.

Security & Compliance

• Apply security baselines to clusters and workloads: RBAC, Pod Security Standards, secrets management, TLS/mTLS and certificate lifecycle.

• Remediate image and cluster vulnerabilities within defined SLAs, working with Cloud Security Operations.

• Maintain audit evidence and follow change and access controls for SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS and SOX requirements.

Collaboration

• Work with Architecture, Product Management, R&D and Support, and give field feedback on what works and what does not in the platform standards.

• Join customer technical calls and escalations as the hands‑on platform expert when needed.

• Document procedures and share knowledge with colleagues and junior engineers.

Qualifications

• Kubernetes & containers: Production experience with Kubernetes (AKS, EKS and/or OpenShift), Docker/OCI, Helm, ingress controllers, CSI storage and container networking.

• Cloud: Hands‑on experience with AWS and/or Azure (compute, VPC/VNet, IAM/Entra ID, load balancers, storage, KMS/Key Vault).

• IaC & CI/CD: Terraform, Ansible, Git‑based workflows, Jenkins or equivalent; exposure to GitOps tooling (Argo CD/Flux).

• Linux & scripting: Strong Linux/UNIX administration, shell scripting and Python; Java familiarity for troubleshooting JVM‑based workloads.

• Networking: TCP/IP, DNS, firewalls, load balancing, TLS/PKI, and protocols including SFTP, FTPS, AS2, PeSIT, HTTPS.

• Observability: Prometheus, Grafana, Splunk, Dynatrace/AppDynamics or similar; log aggregation, alert tuning and dashboards.

• Databases: Working knowledge of Oracle, PostgreSQL, MySQL or SQL Server, including backup and HA basics.

• Security & identity: RBAC, OAuth 2.0, SAML, LDAP, SSO, mTLS and secrets management.

Domain Experience (MFT)

• Hands‑on experience with managed file transfer platforms such as Axway SecureTransport, Transfer CFT, B2Bi, Flow Manager, Central Governance, Sentinel and API Gateway, or equivalents.

• Understanding of file flows, routing, partner onboarding and certificate renewal processes; familiarity with EDI/XML.

• Familiarity with messaging and integration patterns (MQ, Kafka, REST/SOAP).

Qualifications

• Bachelor's degree in Engineering, Computer Science or a related technical field.

• 10 + years in IT; 5+ years in cloud, platform or