Requires prior experience working in an exchange

Positioning

With Kubernetes (ACK) as the core competency, lead the architecture design, governance, and stability construction of a large-scale container platform; complement with DevOps and systems/network/security operations to enhance delivery efficiency and business continuity.

Key Responsibilities

1. Kubernetes/ACK Architecture and Governance

1.1 Design and implement ACK clusters (multi-region, high availability, elastic scaling)

1.2 Disaster recovery and resiliency (multi-master failure handling, etcd backup and restore)

1.3 Networking and isolation (Namespace access control, NetworkPolicy, Ingress/Service design)

1.4 Authorization and access (RBAC, OIDC, auditing and access control)

1.5 Release and canary strategies (rolling/canary/blue-green, traffic topology and gateways)

2. DevOps and Platform Engineering

2.1 CI/CD pipelines and artifact management (build, canary releases, automated rollback)

2.2 ChatOps, automation, and platform integration (LarkSuite/DingTalk, cloud platform API/SDK)

2.3 Cost governance and resource efficiency (utilization analysis, automated cleanup or downscaling of idle instances)

3. Reliability and Security Operations

3.1 SLA visualization (Apdex, error rate, latency monitoring), capacity and performance management

3.2 Incident response and root cause analysis, security baselines and intrusion detection

Technical Requirements

1. Core Kubernetes/ACK Competencies

1.1 Deep understanding of ACK/Kubernetes architecture, high availability, and upgrade maintenance

1.2 Mastery of network and service governance (NetworkPolicy, Ingress, Service, load balancing, WebSocket)

1.3 Familiarity with data access control (RDS/Redis access control, Secret/Config management)

1.4 Experience implementing release and canary strategies (rolling, canary, blue-green)

2. DevOps Toolchain Skills

2.1 Proficient with Jenkins/GitLab CI/Argo CD, with pipeline optimization experience

2.2 Skilled in Python/Go/Shell, with experience in developing operations tools and system integration

3. Systems/Network/Security Operations Skills

3.1 Familiar with multi-cloud resource management (Alibaba Cloud/AWS) and network security boundary design

3.2 Strong incident response, troubleshooting, and root cause analysis skills, with knowledge base maintenance

Mandatory Skills (Kubernetes/ACK)

1. Kubernetes disaster recovery strategies

2. CI/CD architecture design

3. Kubernetes Namespace network isolation design

4. Design for Node-level isolation from Pod services

5. Day-to-day access management and permission control for Kubernetes nodes

6. Mitigation of cluster exposure risk due to missing kubeadmin credentials

7. Experience handling critical Kubernetes incidents

8. Research on Kubernetes traffic topology and canary strategy design

9. Experience with complex Ingress use cases, supported QPS concurrency, and WebSocket services

10. Access control design for Kubernetes services accessing RDS or Redis

11. Rollback or other emergency plans for failed Deployments

Preferred Qualifications

1. Hands-on experience with Istio implementation and mutual TLS authentication

2. Building CI/CD from scratch (0 to 1), with isolated test/staging/prod environments and executable CD deployments

3. Scale of maintained clusters (number of nodes and Pods)

4. Experience developing custom Operator components with clear design methodologies

5. Developed or provided dashboard platforms for developers

6. Day-to-day etcd maintenance experience

7. Intrusion detection experience at the service or server level

8. Design experience for log collection and monitoring alerts

9. Complex affinity/anti-affinity use case experience

10. Use of Snowflake algorithm to resolve inconsistent trailing IP issues

Qualifications

1. Over 7 years of operations experience, including more than 5 years in Kubernetes environments

2. Technically oriented, with practical skills in architecture design, tool development, and application management; extensive experience with Kubernetes applications and security