Principal Systems Architect

Overview This is more than a job. It’s a chance to build, grow, and make a real impact! Join our team as our new Principal Systems Architect . Responsibilities Build & Deploy Build and configure Kubernetes environments (AKS, EKS, OpenShift) for Axway products following approved reference architectures and standards. Deploy and configure MFT products (Secure Transport or equivalents) on Kubernetes using the supplied Helm charts, manifests and runbooks. Implement ingress, load balancing, storage, network policies and static egress/IP allow-listing needed for protocol workloads (SFTP, FTPS, AS2, PeSIT, HTTPS). Validate scripts, charts and documentation for new products and versions in lower environments and report readiness gaps before production release. Automation & CI/CD Develop and maintain Terraform code, Helm values and pipelines (Jenkins, GitHub Actions or GitLab CI) within the established IaC and GitOps framework. Automate repetitive operational tasks: upgrades, certificate renewals, secrets rotation, health checks and environment configuration. Contribute to the Automation team's backlog and improve build-time and reliability of onboarding. Operations & Support Operate production and pre-production clusters: monitoring, patching, upgrades, scaling and capacity management within defined SLAs. Act as L3 technical responder for platform incidents; contribute to P1/P2 restoration and write RCAs with corrective actions. Implement and tune dashboards, alerts and log collection (Prometheus, Grafana, Splunk, Dynatrace, Sentinel or similar) to the agreed monitoring standard. Implement cost and capacity recommendations (right-sizing, autoscaling, resource clean-up) and report results. Take part in the after-hours support rotation. Security & Compliance Apply security baselines to clusters and workloads: RBAC, Pod Security Standards, secrets management, TLS/mTLS and certificate lifecycle. Remediate image and cluster vulnerabilities within defined SLAs, working with Cloud Security Operations. Maintain audit evidence and follow change and access controls for SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS and SOX requirements. Collaboration Work with Architecture, Product Management, R&D and Support, and give field feedback on what works and what does not in the platform standards. Join customer technical calls and escalations as the hands-on platform expert when needed. Document procedures and share knowledge with colleagues and junior engineers. Qualifications Kubernetes & containers: Production experience with Kubernetes (AKS, EKS and/or OpenShift), Docker/OCI, Helm, ingress controllers, CSI storage and container networking. Cloud: Hands-on experience with AWS and/or Azure (compute, VPC/VNet, IAM/Entra ID, load balancers, storage, KMS/Key Vault). IaC & CI/CD: Terraform, Ansible, Git-based workflows, Jenkins or equivalent; exposure to GitOps tooling (Argo CD/Flux). Linux & scripting: Strong Linux/UNIX administration, shell scripting and Python; Java familiarity for troubleshooting JVM-based workloads. Networking: TCP/IP, DNS, firewalls, load balancing, TLS/PKI, and protocols including SFTP, FTPS, AS2, PeSIT, HTTPS. Observability: Prometheus, Grafana, Splunk, Dynatrace/AppDynamics or similar; log aggregation, alert tuning and dashboards. Databases: Working knowledge of Oracle, PostgreSQL, MySQL or SQL Server, including backup and HA basics. Security & identity: RBAC, OAuth 2.0, SAML, LDAP, SSO, mTLS and secrets management. Domain Experience (MFT) Hands-on experience with managed file transfer platforms such as Axway SecureTransport, Transfer CFT, B2Bi, Flow Manager, Central Governance, Sentinel and API Gateway, or equivalents. Understanding of file flows, routing, partner onboarding and certificate renewal processes; familiarity with EDI/XML. Familiarity with messaging and integration patterns (MQ, Kafka, REST/SOAP). Qualifications Bachelor's degree in Engineering, Computer Science or a related technical field. 10 + years in IT; 5+ years in cloud, platform or DevOps/SRE engineering; experience in a service-delivery or customer-facing environment. CKA or equivalent (CKAD, Red Hat OpenShift, AWS/Azure associate or professional certifications) preferred. ITIL Foundation preferred. Core Competencies Strong troubleshooting skills; calm and structured under pressure. Reliable execution: delivers to agreed standards, deadlines and change windows. Clear written and spoken communication in English; works well in global teams. Self-starter who raises risks early and documents their work. Nice to Have Experience migrating legacy MFT workloads to containers. Experience with OpenShift operators or Kafka on Kubernetes. Experience with SaaS operations, SLA reporting and cloud cost optimization. Company Overview Axway has been shaping the future of enterprise integration for over 25 years. We are recognized as global industry leaders, helping organizations drive digital transformation with secure, mission-critical software that powers impactful business outcomes. As part of 74Software , we're backed by a group of leading software companies delivering mission-critical solutions worldwide. Our focus is on delivering long-term value, leveraging cutting-edge technology, and fostering strong client partnerships. Join us and be part of a collaborative, forward-thinking team shaping the future of enterprise integration solutions. Why Axway? At Axway, we believe we're better together. We celebrate diverse perspectives and experiences, knowing our people are our greatest strength. Join us and be part of a team where you can thrive, grow, and make an impact. We offer benefits that support your health, growth, and lifestyle, so you can thrive at work and beyond, including health coverage, retirement plans, paid time off, flexible work, career development, competitive pay, and global culture perks. Equal Opportunity Employer We are committed to providing equal opportunities and ensuring a fair and inclusive recruitment process. We do not discriminate on the basis of age, disability, gender, sexual orientation, race, religion, or any other protected characteristic. #LI-SV1