Platform & DevOps Engineer Service

Function

We’re looking for a Platform & DevOps Engineer to join our client’s team and take operational ownership of a high-availability cloud platform built on Kubernetes. In this role, you will help ensure that critical customer-facing Web UIs and APIs remain reliable, secure, performant, and available around the clock. You will work closely with technical teams across development, security, product, and operations to keep the platform stable, observable, well-controlled, and ready for change.

Responsibilities

As a Platform & DevOps Engineer, you will be responsible for the reliable day-to-day operation and lifecycle management of the platform across DEV, TEST, ACC, and PROD environments. Your responsibilities will include:

• Operating Kubernetes primitives and platform add-ons, including ingress controllers, service discovery, workload identity, RBAC, network policies, and platform security controls.

• Troubleshooting production platform issues such as pod lifecycle problems, networking failures, DNS issues, scheduling errors, OOM events, crash loops, and resource starvation.

• Participating in a 24/7 on-call rotation for critical platform services, including incident triage, mitigation, Root Cause Analysis, and post-incident follow-up.

• Maintaining and improving runbooks, operational procedures, change documentation, and audit-ready evidence.

• Planning and executing platform changes, upgrades, rollouts, patches, and maintenance activities in a controlled, predictable, and low-risk way.

• Operating observability tooling across metrics, logs, traces, dashboards, alerts, and telemetry correlation.

• Automating repetitive operational tasks and supporting a Platform as Code / GitOps way of working.

Technical Profile

The ideal candidate brings deep hands-on experience with production-grade Kubernetes environments and modern platform operations. Key technical skills include:

• Kubernetes: multi-cluster architecture, lifecycle management, RBAC, least-privilege design, network policies, traffic segmentation, CSI, PV/PVC, stateful workloads, HPA/VPA, resource tuning, Pod Security Standards, admission controllers, and cluster-level debugging.

• GitOps & CI/CD: advanced ArgoCD, App-of-Apps, sync waves, hooks, drift detection, reconciliation, multi-environment promotion workflows, PR-driven platform changes, YAML-based CI/CD pipelines, and secure secret handling.

• Packaging & configuration: advanced Helm chart authoring, reusable library charts, OCI-based registries, values layering strategies, and Kustomize overlays.

• Containers & artifact management: Docker, secure multi-stage builds, image optimization, Harbor, JFrog Artifactory, registry management, artifact versioning, promotion strategies, RBAC, replication, and vulnerability scanning.

• Security & secrets: HashiCorp Vault, dynamic secrets, CSI integration, TLS and certificate lifecycle management, RBAC governance, supply chain security awareness, and vulnerability remediation.

• Observability & reliability: OpenTelemetry, Prometheus or VictoriaMetrics, Loki, LogQL, Tempo, Grafana, SLI/SLO design, error budget thinking, actionable alerting, and alert noise reduction.

• Networking & automation: TCP/IP, DNS, TLS, mTLS, Kubernetes Services, Ingress, reverse proxy concepts, east-west and north-south traffic, API routing, traffic management, Network Policies, advanced Bash scripting, and infrastructure automation.

Nice-to-have experience includes Kong API Gateway, Redis, PostgreSQL, MongoDB, and Kargo on top of ArgoCD for release orchestration.

Ideal Candidate

You are a structured, risk-aware, and detail-oriented platform professional who is comfortable taking operational responsibility for business-critical environments. You can work calmly under pressure, communicate clearly during incidents and changes, and balance daily operational needs with longer-term platform improvements.

• Proven experience in production operations, platform engineering, or platform support roles.

• Strong troubleshooting skills across distributed systems.

• Documentation-first mindset and a strong focus on operational knowledge sharing.

• Comfortable working with development, security, product, and infrastructure stakeholders.

• Clear written and verbal communication skills.

• Available to work full-time in a hybrid setup, with regular onsite presence in Brussels.

• For candidates requiring work authorization: a valid Belgian work permit and residence permit are required.

• Language requirements: English and Dutch.

Contactperson & Reference

• Reference #: INW26781
• Geert Roete
• geert.roete@i4m.be