Job description

About the Role The ideal candidate for this role is a strong cloud architect who excels at both big-picture thinking as well as hands-on technical work. With very strong AWS, Kubernetes and web infrastructure skillsets, they will be working on projects building or improving our core compute, core network and edge infrastructure.They also play a critical role in helping the iCapital platform scale and doing so with an automation-first mentality. The engineer will work with application and platform teams to onboard services, establish connectivity, troubleshoot traffic flows, and maintain consistent networking patterns across environments. Responsibilities Design and continually improve Kubernetes architecture, also helping operationally manage cluster lifecycle. Work on projects integrating new self-hosted and SaaS services, in some cases understanding and working with developers to help design software architecture Manage Transit Gateway, Network Firewall and external connectivity. Own architectural guidance for edge and traffic management, including CDN, DNS, and TLS strategies (e.g., Akamai, Cloudflare). Produce and maintain reference architectures, design documents, and architectural guardrails Partner with engineering, security, and product teams to ensure platform standards are practical, well understood, and broadly adopted. Qualifications 8+ years of experience in platform, cloud, or infrastructure engineering roles, with demonstrated architectural responsibility. Must have strong hands-on experience designing and operating Kubernetes platforms in production environments, including a strong understanding of autoscaling strategies, node provisioning, and security on EKS. Deep understanding of AWS infrastructure, including networking, security primitives, and managed services. This includes expertise in cloud networking architecture patterns, including VPC design, routing, and planning for scale. Strong understanding of ingress/egress, TGW design and private connectivity. Comfortable operating as a senior individual contributor with influence across multiple teams as a leader. Very Strong written and verbal communication skills, with the ability to explain architectural decisions to both technical and nontechnical audiences. Preferred Qualifications Expertise in Kong or other API Gateways at a deep level Experience directly managing Akamai in a production environment Strong understanding of application design principles Some experience with EKS standards such as Bottlerocket, Karpenter, Auto-mode A software engineering background is helpful, and some experience with Python expected. Certifications (AWS / Kubernetes) are a plus but not required. Benefits The base salary range for this role is $130,000 to $160,000 depending on level. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit icapitalnetwork.com Twitter: @icapitalnetwork | LinkedIn: linkedin.com | Awards Disclaimer: icapitalnetwork.com iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Requirements

Must-haves

Design and continually improve Kubernetes architecture, also helping operationally manage cluster lifecycle.
Work on projects integrating new self-hosted and SaaS services, in some cases understanding and working with developers to help design software architecture
Manage Transit Gateway, Network Firewall and external connectivity. Own architectural guidance for edge and traffic management, including CDN, DNS, and TLS strategies (e.g., Akamai, Cloudflare).
Produce and maintain reference architectures, design documents, and architectural guardrails
Partner with engineering, security, and product teams to ensure platform standards are practical, well understood, and broadly adopted.
Strong understanding of ingress/egress, TGW design and private connectivity.
Comfortable operating as a senior individual contributor with influence across multiple teams as a leader.
Very Strong written and verbal communication skills, with the ability to explain architectural decisions to both technical and nontechnical audiences.

Nice-to-haves

Expertise in Kong or other API Gateways at a deep level
Experience directly managing Akamai in a production environment
Strong understanding of application design principles
Some experience with EKS standards such as Bottlerocket, Karpenter, Auto-mode
A software engineering background is helpful, and some experience with Python expected.
Certifications (AWS / Kubernetes) are a plus but not required.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awskubernetesapipython

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

Pto

Paid Time Off

Parental Leave