Senior Cloud Engineer ( Active Directory and Kubernetes)

About Us:

At apexanalytix, we’re lifelong innovators! Since the date of our founding nearly four decades ago we’ve been consistently growing, profitable, and delivering the best procure-to-pay solutions to the world. We’re the perfect balance of established company and start-up. You will find a unique home here.

And you’ll recognize the names of our clients. Most of them are on The Global 2000. They trust us to give them the latest in controls, audit and analytics software every day. Industry analysts consistently rank us as a top supplier management solution, and you’ll be helping build that reputation.

Read more about apexanalytix - https://www.apexanalytix.com/about/

Job Details

Quick Take -

We are seeking an experienced Senior Cloud Engineer to lead the design, implementation, and support of modern hybrid infrastructure environments. This includes deep hands-on expertise in KubeVirt, Kubernetes, Continuous Delivery tools like FluxCD, Active Directory, DFS file systems, Certificate Services, Microsoft 365, and email security platforms like Mimecast. This role is ideal for a candidate with a strong infrastructure and scripting background who also understands modern infrastructure-as-code (IaC), container orchestration, and enterprise IT service delivery.

The Work -

KubeVirt, Kubernetes & Cloud-Native Infrastructure

• Architect, deploy, and manage KubeVirt environments for virtualization on Kubernetes.
• Automate Kubernetes cluster provisioning using Cluster API (CAPI) integrated with KubeVirt.
• Manage and monitor multi-tenant Kubernetes clusters and workloads using Helm and GitOps (FluxCD).
• Ensure high availability of workloads using proper node/pod-level scheduling, storage, and network configurations.
• Implement network policies, ingress controllers (NGINX/Kong), and secure container runtime environments.

GitOps (FluxCD)

• Maintain and extend KubeVirt infrastructure for Kubernetes cluster lifecycle management.
• Use FluxCD to drive declarative GitOps workflows for Kubernetes and VM infrastructure.
• Collaborate with automation teams to integrate Git workflows with Infrastructure-as-Code practices.

Microsoft Services: Active Directory, DFS, Certificates

• Administer and maintain multi-domain Active Directory environments including GPO, OU management, and RBAC.
• Support and troubleshoot Distributed File System (DFS) replication and availability.
• Manage internal certificate authority (ADCS) services, including certificate templates, auto-enrollment, and PKI troubleshooting.

Email Infrastructure:

Microsoft 365 & Mimecast • Oversee and support Microsoft 365 Exchange Online environment including mail flow, compliance, and hybrid scenarios.

• Configure and manage Mimecast for email security, archiving, and continuity.
• Monitor mail delivery issues and coordinate remediation with internal and external support teams.

Linux

• Administer Linux servers (RHEL/CentOS/Alma Linux) in clustered and standalone configurations.
• Conduct OS hardening, patching, performance tuning, and kernel-level debugging.

Automation, Monitoring & Performance Optimization

• 
  Automate operational workflows using IaC/OpenTofu, Ansible, and shell scripting.
• Monitor system health using Prometheus, Grafana, AlertManager, and custom metrics dashboards.
• Perform capacity planning, performance optimization, and disaster recovery (DR) simulations.

Documentation, Collaboration & Mentorship

• Maintain detailed documentation for systems, architecture, runbooks, and SOPs.
• Collaborate with software engineers, DevOps, and IT support teams for smooth infrastructure operations.
• Mentor junior engineers and support staff in modern cloud technologies and IT best practices.

The Must-Haves -

• 7+ years in systems engineering, virtualization, and cloud infrastructure.
• Strong hands-on experience with KubeVirt, Kubernetes, and CloudStack.
• Fluency with GitOps tools like FluxCD, Helm, and Kubernetes RBAC.
• Proficiency in Active Directory, GPO, DNS/DHCP, DFS, and internal PKI. Familiarity with Exchange Online, Mimecast, SPF/DKIM/DMARC, and email routing.
• Solid scripting and automation skills using Bash, Ansible, PowerShell, or Python.
• Strong knowledge of monitoring, logging, and performance analysis tools.
• Excellent troubleshooting, documentation, and incident resolution skills.

Preferred Qualifications

• Experience with hybrid cloud or multi-cloud setups (Azure, AWS, GCP).
• Familiarity with Service Mesh (Istio/Linkerd), SSO integrations (OAuth2/OIDC).
• Experience with security compliance and data protection in enterprise IT.
• Background in email archiving, DLP, and mail gateway policies.
• Knowledge of enterprise backup/restore and DR solutions for Kubernetes and VMs.

Over the years, we’ve discovered that the most effective and successful associates at apexanalytix are people who have a specific combination of values, skills, and behaviors that we call “The apex Way”. Read more about The apex Way - https://www.apexanalytix.com/careers/

Benefits

At apexanalytix we know that our associates are the reason behind our successes. We truly value you as an associate and part of our professional family. Our goal is to offer the very best benefits possible to you and your loved ones. When it comes to benefits, whether for yourself or your family the most important aspect is choice. And we get that. apexanalytix offers competitive benefits for the countries that we serve, in addition to our BeWell@apex initiative that encourages employees’ growth in six key wellness areas: Emotional, Physical, Community, Financial, Social, and Intelligence.

With resources such as a strong Mentor Program, Internal Training Portal, plus Education, Tuition, and Certification Assistance, we provide tools for our associates to grow and develop.