Tanzu Engineer

Description:

The Tanzu Engineer will play a crucial role in the design, deployment, and upkeep of VMware Tanzu-based container platforms within the insurance sector. This position demands extensive hands-on proficiency with Kubernetes, Tanzu Kubernetes Grid (TKG), Tanzu Mission Control (TMC), Tanzu Application Platform (TAP), and various automation tools. The engineer will work closely with Cloud, DevOps, Security, and Application teams to ensure the delivery of secure, scalable, and compliant container platforms that meet insurance regulatory and operational standards.

Platform Engineering & Deployment

Deploy, configure, and sustain Tanzu Kubernetes Grid (TKG) clusters in both on-premises and cloud environments (vSphere, AWS, Azure).

Oversee Tanzu Mission Control (TMC) for lifecycle management of clusters, policy enforcement, and governance. Implement Tanzu Application Platform (TAP) to facilitate developer onboarding, CI/CD integration, and ensure a secure supply chain.

Construct and manage cluster add-ons (Ingress, Service Mesh, Logging, Monitoring).

Automation & CI/CD

Streamline cluster provisioning through automation using Terraform, YAML, Helm, and GitOps workflows (ArgoCD, Flux).

Integrate Tanzu with CI/CD pipelines (Jenkins, GitLab CI, Bamboo). Create reusable automation modules for cluster upgrades, scaling, and patching.

Security & Compliance

Establish security protocols using TMC, OPA/Gatekeeper, Pod Security Standards, and network segmentation.

Guarantee adherence to insurance regulatory requirements (auditability, data protection, workload isolation). Manage secrets through Vault, Kubernetes Secrets, or external secret management solutions.

Monitoring & Reliability

Set up monitoring systems using Prometheus, Grafana, Tanzu Observability, or vRealize Operations.

Diagnose cluster issues (networking, storage, workloads, control plane). Implement backup and disaster recovery strategies for Kubernetes workloads.

Collaboration & Governance

Collaborate with App-Dev teams to onboard microservices and upgrade legacy insurance applications.

Engage with Security and Cloud teams to uphold governance, tagging, and policy frameworks. Document platform architecture, standard operating procedures (SOPs), and incident root cause analysis (RCA) reports.

Tanzu & Kubernetes

Extensive experience with TKG, TMC, TAP, and vSphere with Tanzu.

Thorough understanding of Kubernetes architecture, networking, RBAC, storage, and workload management. Proficient in Helm, Kustomize, YAML, and GitOps.

Cloud & Infrastructure

Practical experience with vSphere, NSX-T, AWS, OCI, or Azure.

Familiarity with container registries (Harbor, ECR, ACR, OCI Registry).

DevOps & Automation

Proficient in Terraform, Git, CI/CD pipelines, and automation scripting (Python, Bash).

Experience with service mesh (Istio), ingress controllers, and API gateways.

Security & Compliance

Understanding of OPA/Gatekeeper, Pod Security Standards, image scanning, and secure supply chains.

Acquainted with insurance compliance requirements (audit logs, data residency, workload isolation).

Non-Technical Requirements

Strong analytical and troubleshooting abilities.

Exceptional communication skills and cross-team collaboration. Capability to translate platform concepts for business stakeholders.

High adaptability and a commitment to staying updated with Kubernetes and Tanzu technologies.

Preferred Certificate

VMware Certified Professional – Application Modernization (VCP-AM)

VMware Certified Specialist – Tanzu Kubernetes Grid

VMware Certified Specialist – Tanzu Mission Control

CKA (Certified Kubernetes Administrator) 

Essential for any Tanzu engineer.

CKAD (Certified Kubernetes Application Developer)

HashiCorp Terraform Associate

Demonstrated ownership, accountability, and a collaborative mindset.

Capability to lead platform modernization projects.

Proactive in enhancing platform reliability and developer experience.