Senior Cloud / Platform Architect

About the role

We are looking for a Senior Cloud / Platform Architect to evolve an existing multi‑tenant Wi‑Fi platform from a working prototype to a production‑grade service. You will own the design, implementation and documentation of critical components that enable the platform to be handed over to customers safely and at scale.

Key responsibilities

• Design and implement a robust device identity renewal and recovery process that works without physical access.
• Define and build the runtime architecture for TLS‑based device connections, including service topology, storage placement (Ceph and NVMe) and failure‑domain handling.
• Architect the site‑gateway redundancy model for x86 appliances running an OpenWrt‑based image, including failover and remote recovery mechanisms.
• Manage Helm chart production, GitOps pipelines and environment promotion with clear, rebaseable diffs against upstream charts.
• Establish observability, SLOs and alerting that surface issues to operators before customers are impacted.
• Measure and validate the control‑plane scaling limits, identify bottlenecks and drive performance improvements.

Required profile

• Senior‑level professional with hands‑on experience delivering production‑grade, on‑premises Kubernetes clusters (kubeadm or equivalent).
• Practical knowledge of certificate authority operations, PKI policies and lifecycle management.
• Proven ability to translate architectural decisions into working implementations and documentation.
• Strong problem‑solving mindset for reliability, scalability and security challenges.

Required skills

• Kubernetes (kubeadm), Helm, GitOps
• Certificate Authority (PKI), mutual TLS, certificate renewal
• Ceph storage, NVMe, Linux networking
• OpenWrt, x86 appliance provisioning
• Keycloak/OIDC, role‑based access control
• React (operator console)
• Observability tools, SLO definition, alerting
• TCP/TLS networking, load‑balancer services