Principal Kubernetes Platform Engineer
Mastercard
Mastercard
Mastercard is seeking a Principal Kubernetes Platform Engineer to lead the development of our next-generation Decision Management Platform. This role offers a unique blend of enterprise-scale technical leadership and hands-on engineering. You will leverage modern AI-assisted development tools to design, code, and validate core platform capabilities, enhancing product effectiveness, business delivery, and technical resilience.
Key focuses include real-time AI inferencing and decisioning technologies. You will collaborate closely with technology executives and senior leaders to shape the future of AI & DPE technology strategy, driving innovation and efficiency within a global financial technology leader.
Own and operate AWS EKS clusters, including upgrades, node groups, and capacity planning. Author and maintain Helm charts for application services and infrastructure components like Kafka, Redis, and PostgreSQL. Design and implement robust security configurations using IAM, KMS, and Secrets Manager, adhering to the principle of least privilege. Enforce platform security standards, Pod Security Standards, and Network Policies within CI pipelines to ensure PCI DSS compliance.
Manage ECR image registry, including scanning policies and lifecycle rules. Build and maintain AWS CDK infrastructure constructs for core AWS services. Define and operate ingress patterns, including ALB and ACM certificates. Lead platform security reviews and validate all infrastructure changes against organizational compliance standards. Collaborate with application engineering teams to onboard workloads and resolve platform-level issues, driving GitOps practices via ArgoCD and CI/CD integration.
Extensive knowledge of Kubernetes, including EKS operations, node groups, and cluster autoscaler. Proficiency in Helm for multi-environment chart authoring and GitOps delivery. Strong security expertise in IAM, KMS, Secrets Manager, Pod Security Standards, Network Policies, and PCI DSS compliance. Solid understanding of networking concepts, including VPC design, ALB ingress, and ACM certificate management.
Experience with container platform management, including ECR, image scanning, and Dockerfile best practices. Proven experience with CI/CD and GitOps workflows using tools like Jenkins, Bitbucket, GitHub, and ArgoCD. Familiarity with observability tools such as CloudWatch Container Insights, OpenTelemetry, Prometheus, and Grafana is essential. Experience working with polyglot microservice environments is also highly valued.
MasterCard
Information Technology & Services