Senior Kubernetes

ObjectiveWe are seeking an experienced Kubernetes and cloud-native architecture consultant to conduct an independent, hands-on review of our containerized deployment architecture and documentation. · The objective is to test our containerized applications to ensure that our solut ...

Job description

Objective

We are seeking an experienced Kubernetes and cloud-native architecture consultant to conduct an independent, hands-on review of our containerized deployment architecture and documentation.

The objective is to test our containerized applications to ensure that our solution aligns with modern industry standards for scalability, security, operability, maintainability, and production readiness.

About the Product


yCrash Server:
Java-based root cause analysis platform for troubleshooting JVM applications. Analyzes GC logs, heap dumps, thread dumps, application logs, and system/application metrics.


yc-360 Script:

Containerized diagnostic script that captures JVM artifacts (GC logs, heap dumps, thread dumps, logs, and system metrics) from the target application and securely transmits them to the yCrash server for analysis.

Supported Platforms:
Docker, Docker Compose, Kubernetes, OpenShift, and AWS Fargate.
Supported Deployment Models for yc-360 Script


Docker:
Run yc-360 Script in Sidecar Container
Run yc-360 Script in Same Container as the application
Run yc-360 Script on Host machine


Kubernetes:
Run yc-360 Script in Sidecar Container
Run yc-360 Script in Same Container as the application


OpenShift:
Run yc-360 Script in Sidecar Container on OpenShift


AWS Fargate:
Run yc-360 Script in Sidecar Container on AWS Fargate

Scope of Work

The consultant is expected to perform hands-on validation and testing of all supported deployment models across platforms and provide a comprehensive assessment of architecture, scalability, security, and operational readiness.

Provide clear recommendations and required changes (if any).

• Docker Image Review & Optimization
• Review Dockerfiles for yCrash server and yc-360 script.
• Validate base image choices, layering strategy, and build efficiency.
• Evaluate security best practices (non-root user, permissions, secrets handling).
• Review JVM container tuning for Java server (memory limits, GC behavior, container awareness).
• Recommend improvements for performance, stability, and maintainability.
• Deployment Model Validation (All Platforms)
• Test and validate all supported yc-360 deployment models across Docker, Kubernetes, OpenShift, and AWS Fargate.
• Verify sidecar-based deployment behavior and container interaction.
• Validate same-container execution model.
• Validate host-based execution model (Docker).
• Identify limitations, risks, or inconsistencies across environments.
• Kubernetes & OpenShift Architecture Review
• Review deployment architecture for yCrash server and yc-360 script.
• Validate lifecycle handling (startup, shutdown, graceful termination).
• Review resource requests/limits (CPU, memory, ephemeral storage).
• Assess readiness, liveness, and startup probes.
• Evaluate configuration patterns and environment management.
• Sidecar Architecture Validation
• Validate interaction between application container and yc-360 script.
• Review volume mounts and shared access to logs, dumps, and metrics.
• Evaluate filesystem permissions and securityContext settings.
• Assess reliability under load and failure scenarios.
• Helm Chart Review
• Review Helm chart structure, templating practices, and design.
• Validate configurability across environments.
• Assess upgrade and rollback safety.
• Recommend improvements for maintainability and operational clarity.
• Scalability & Load Readiness
• Evaluate horizontal scaling strategy and replica configuration.
• Validate behavior under large heap dump and log uploads.
• Assess pod stability under high CPU, memory, and I/O usage.
• Identify performance bottlenecks and scaling risks.
• Security & Compliance Review
• Review RBAC configuration and least-privilege design.
• Validate securityContext and container security posture.
• Review secret management and sensitive data handling.
• Identify container-level and cluster-level security risks.
• Observability & Operability Review
• Review logging and metrics exposure.
• Validate compatibility with Kubernetes-native monitoring tools.
• Assess production troubleshooting readiness.
• Documentation Review
• Validate accuracy and completeness of deployment documentation.
• Ensure documentation clearly explains all supported deployment models.
• Identify gaps in production guidance or operational instructions.
• Recommend improvements for clarity and usability.

Deliverables

• Comprehensive written review report with findings.
• Clear, prioritized action items.
• Recommended changes to Dockerfiles, Kubernetes manifests, Helm charts, or documentation (if applicable).
• Explicit assessment of production readiness and alignment with industry standards.
• Validation report confirming results of testing across all supported deployment models of yCrash server and yc-360 script.

Required Expertise

• Strong hands-on Kubernetes experience in production environments.
• Deep understanding of container architecture and deployment patterns.
• Docker image optimization and security hardening.
• Helm chart authoring and review.
• Experience running Java applications in containerized environments.
• Familiarity with OpenShift and AWS Fargate.
• Understanding of cloud-native scalability, resiliency, and security best practices.

References:

• Documentation link -
• yCrash server docker link -
• yCrash server DockerHub images -
• yCrash server Kubernetes link -
• yCrash server Openshift link -
• yc-360 script docker link -
• yc-360 script DockerHub images -
• yc-360 script Kubernetes link -
• yc-360 script Openshift link -
• yc-360 script AWS Fargate link -
• Helm charts link -
• yCrash server trial registration page link -

Contract duration of 1 to 3 months. with 30 hours per week.

Mandatory skills:
Kubernetes, Docker, DevOps, AWS Fargate, OpenShift, Amazon Web Services