Job Summary
Job Description:
Title: Azure Local (HCI) & AKS Arc Cluster - Senior Administrator
About the Role:
Looking for a hands-on infrastructure engineer to own the build, lifecycle management, and hardening of Azure Local (Azure Stack HCI) clusters running Arc-enabled Kubernetes (AKS). This role sits at the intersection of on-premises hyperconverged infrastructure and hybrid cloud management — deploying 2+ node HCI clusters, standing up AKS on top of them via Azure Arc, and ensuring the resulting platform is production-ready, monitored, and documented to enterprise standards, including Post-Implementation Review (PIR) documentation for client and internal engagements.
Key Responsibilities
Key Responsibilities
• Design, build, and validate Azure Local (Azure Stack HCI) clusters (2-node and larger) including storage spaces direct (S2D), networking (SET switches, RDMA/RoCE or iWARP), and cluster witness configuration.
• Deploy and manage Arc-enabled Kubernetes (AKS Arc) clusters on top of Azure Local, including node pool sizing, CNI selection, and integration with Azure Arc for centralized policy and monitoring.
• Own end-to-end cluster lifecycle: initial deployment, patching/updates via Lifecycle Manager, scaling, and decommissioning.
• Configure hybrid identity and access — integrating Azure Arc resources with Microsoft Entra ID (Azure AD) and applying RBAC/Azure Policy consistently across on-prem and cloud resources.
• Build and maintain monitoring and alerting for HCI and AKS Arc workloads using Azure Monitor, Container Insights, and relevant Log Analytics workspaces.
• Write and maintain Standard Operating Procedures (SOPs), build runbooks, and Post-Implementation Review (PIR) documentation for every cluster deployment or major change.
• Automate deployment and configuration tasks using PowerShell, Azure CLI, Bicep/ARM templates, or Terraform; integrate with CI/CD pipelines (GitHub Actions) where applicable.
• Troubleshoot cluster, storage, and networking issues across the HCI stack and the Kubernetes control/data plane, engaging Microsoft support where needed.
• Collaborate with client-facing infrastructure and DevOps teams to translate requirements into HCI/AKS architecture and capacity plans.
• Support security hardening and compliance activities — patch cadence, vulnerability remediation, and access reviews across the HCI/AKS estate.
Skill Requirements
Required Skills & Experience
• 4-9 years in enterprise infrastructure/systems engineering, with at least 2 years of hands-on Azure Stack HCI / Azure Local deployment and operations.
• Working knowledge of Kubernetes fundamentals (pods, deployments, services, ingress, RBAC) and hands-on experience with AKS or AKS Arc specifically.
• Solid grasp of Windows Server clustering technologies — Failover Clustering, Storage Spaces Direct (S2D), Hyper-V — and networking concepts (VLANs, SET switching, RDMA).
• Experience with Azure Arc for hybrid resource management, policy enforcement, and monitoring.
• Scripting/automation proficiency in PowerShell and/or Azure CLI; exposure to infrastructure-as-code (Bicep, ARM templates, or Terraform).
• Familiarity with Microsoft Entra ID (Azure AD), including hybrid identity concepts (Azure AD Connect, conditional access) as applied to Arc-connected resources.
• Demonstrated ability to write clear technical documentation — SOPs, runbooks, and PIR/post-mortem reports.
• Comfortable working directly with clients to gather requirements and communicate technical tradeoffs.
Other Requirements
Preferred / Nice to Have
• Microsoft certifications: AZ-800/AZ-801 (Windows Server Hybrid Administrator), AZ-500 (Security), or AZ-104 (Azure Administrator); CKA/CKAD is a plus.
• Experience with GitHub Actions or Azure DevOps pipelines, including OIDC-based authentication to Azure.
• Exposure to FlexLM or other license-server management in an HPC/EDA-adjacent environment.
• Prior experience supporting regulated or client-facing engagements where documentation rigor (PIR, change control) is contractually required.
• Familiarity with GPU/accelerator scheduling on Kubernetes, or with high-performance storage (e.g., FSx for Lustre or equivalent) is a plus, though not core to this role.