About this role
About Avaya
Avaya is an enterprise software leader that helps the world’s largest organizations and government agencies forge unbreakable connections.
The Avaya Infinity™ platform unifies fragmented customer experiences, connecting the channels, insights, technologies, and workflows that together create enduring customer and employee relationships.
We believe success is built through strong connections – with each other, with our work, and with our mission. At Avaya, you'll find a community that values your contributions and supports your growth every step of the way.
Learn more at https://www.avaya.com
Job Information
Job Code: 00194006
Job Family: Research and Development
Job Function: Software Engineering
About The Opportunity
Design, code, secure and evolve cloud-native platforms across Azure, GCP, AWS and hybrid environments. Build platform capabilities with Terraform, Kubernetes, GitOps and software engineering—and actively advance agentic platform development, from AI-assisted design and code creation to reusable agents and tool-integrated engineering workflows. Security, compliance and operational rigor are integral to delivery. Thrive in a fast-paced, startup-like engineering environment with rapid delivery, high ownership, hands-on problem solving and disciplined production quality.
What you will build
- Design and implement reusable Terraform modules, cloud landing-zone components, provisioning and lifecycle workflows across Azure, GCP and AWS; engineer resilient multi-region and dedicated-instance patterns.
- Build and maintain production Kubernetes foundations: clusters, node pools, networking, autoscaling, storage, workload identity, capacity, upgrades and recovery.
- Develop GitOps delivery platforms using Argo CD, Helm, GitHub Actions and automated validation, promotion, rollback and drift detection.
- Own platform services and their integration: Istio/service mesh, Keycloak/OIDC, cert-manager/PKI, API gateways, ingress/egress, DNS, secrets management and cloud-native networking.
- Engineer private networking, routing, firewall policy, WAF, VPN/private interconnect, TLS/mTLS, segmentation, load balancing and end-to-end connectivity troubleshooting.
- Codify zero-trust and least-privilege controls across identities, workloads, environments, networks, secrets, administrative access and service-to-service communication.
- Design and automate technical safeguards, traceable changes, evidence capture, continuous monitoring, vulnerability response and environment separation supporting FedRAMP, PCI DSS and SOC 2 requirements. Partner with GRC/Security to map implementations to applicable control obligations; do not equate platform features with certification or authorization.
- Engineer the observability stack end to end using Prometheus, Grafana, Loki, Thanos, Grafana Alloy and OpenTelemetry: metrics collection, long-term retention, centralized logs, alerting, dashboards, telemetry pipelines, capacity signals and incident diagnostics.
- Deploy, scale, tune, secure and troubleshoot stateful platform components—including Kafka, Redis, relational databases (e.g., PostgreSQL, MariaDB) and document databases (e.g., MongoDB)—covering operators, persistence, replication, backup/restore, upgrades, availability, throughput and recovery.
- Own secure API gateway and ingress architecture: authentication and authorization, TLS termination, rate limiting, routing, API lifecycle integration, firewall/WAF policy, and service-mesh connectivity.
- Develop platform tooling in Python, Go or Bash; eliminate recurring operational toil with durable engineering fixes and self-service capabilities.
- Develop and integrate agentic platform-development capabilities—not just production-operations agents—including AI-assisted Terraform/module and Helm/chart authoring, platform API and controller development, architecture analysis, code review, test generation, infrastructure-plan validation, safe change proposals, developer-facing tools, and reusable agent workflows integrated with GitOps/CI/CD.
- Use and extend agentic development workflows across the full engineering lifecycle—architecture exploration, Terraform/Helm authoring, code reviews, automated tests, environment validation, pull requests and release readiness—not only production diagnosis and remediation.
About The Requirements
Required experience
- 8+ years in software, cloud, DevOps/SRE or platform engineering, with substantial hands-on design and implementation.
- Advanced Terraform and Kubernetes skills; production experience with Argo CD, GitOps, Helm and CI/CD.
- Deep experience with Azure plus GCP or AWS; ability to transfer architecture patterns across cloud providers.
- Strong Linux, networking, DNS, TLS, PKI, routing, firewall, IAM/RBAC and distributed-system troubleshooting.
- Hands-on with several platform components such as Istio, Keycloak, cert-manager, API gateways and secrets management, with ability to learn the others.
- Practical deployment, scaling, hardening and operational troubleshooting of Kafka, Redis and relational/document databases in Kubernetes or managed cloud services; experience with API gateways and secure API exposure.
- Hands-on experience with Prometheus, Grafana, Loki, Thanos, Grafana Alloy or equivalent metrics/logging pipelines, including cardinality, retention, alert quality and production troubleshooting.
- Demonstrated experience implementing security controls in regulated environments and supporting FedRAMP, PCI DSS, SOC 2 or comparably rigorous programs.
- Coding ability in Python, Go or equivalent; evidence of shipping automation and reusable engineering components.
- Ability to reason from application behavior through cluster, identity, certificate, network and cloud dependencies.
- Demonstrated ownership in a fast-paced, startup-like environment: rapid iteration, shifting priorities, independently driving work to production and balancing speed with security and reliability.
Preferred
- Multi-tenant or customer-dedicated SaaS, hybrid/air-gapped architectures, Kubernetes operators/CRDs, cloud cost management.
- Compliance-as-code, automated audit evidence, policy engines, vulnerability scanning and supply-chain security.
- Hands-on experience building or extending agentic development workflows, agent tool integrations or shared engineering capabilities for infrastructure and Kubernetes—not only using AI coding assistants.
Success in the first 6–12 months
- Deliver reusable cloud/Kubernetes capabilities that reduce custom environment work and deployment variability.
- Remove material gaps in security posture and make evidence collection and drift detection more repeatable.
- Improve deployment safety, platform upgradeability and production diagnostics with measurable outcomes.
- Build or substantially improve deployment, resilience, scaling and observability for Kafka, Redis, relational and document databases and gateway services; reduce operational bottlenecks.
- Build and share agentic platform-development workflows that help engineers design, implement, test and evolve secure infrastructure faster, with measurable quality and review controls.
Leveling | Senior: independently owns significant subsystems and implementations. Principal: sets cross-platform architecture and standards, resolves cross-domain design decisions and mentors multiple teams.
Experience
12+ Years of Experience
## Education
Bachelor degree or equivalent experience Advance Degree preferred
## Preferred Certifications
Footer
Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.
Avaya is an Equal Opportunity employer and a U.S. Federal Contractor. Our commitment to equality is a core value of Avaya. All qualified applicants and employees receive equal treatment without consideration for race, religion, sex, age, sexual orientation, gender identity, national origin, disability, status as a protected veteran or any other protected characteristic. In general, positions at Avaya require the ability to communicate and use office technology effectively. Physical requirements may vary by assigned work location. This job brief/description is subject to change. Nothing in this job description restricts Avaya right to alter the duties and responsibilities of this position at any time for any reason.