Principal Kubernetes Networking Engineer (K3s / Bare Metal) jobs in United States
cer-icon
Apply on Employer Site
company-logo

Belcan · 21 hours ago

Principal Kubernetes Networking Engineer (K3s / Bare Metal)

Belcan is a leading provider of qualified personnel to many of the world's most respected enterprises. This role exists to design, build, and own advanced networking for hybrid, bare-metal Kubernetes (K3s) environments, ensuring reliable operation across complex networking scenarios.

Enterprise SoftwareIndustrial EngineeringProject ManagementSoftwareTechnical Support
check
Work & Life Balance
badNo H1BnoteU.S. Citizen Onlynote

Responsibilities

Own the design and implementation of networking for hybrid K3s clusters running on bare metal (x86, ARM, accelerators), supporting multi-interface and multi-network workloads
Configure, operate, and optimize CNI plugins (Multus, Cilium, Calico) to enable VLAN-backed, SR-IOV, and multi-CNI networking scenarios
Deploy, configure, and manage bare-metal load balancing using MetalLB with BGP integration
Design and develop Kubernetes controllers/operators (Go) to manage IP pools, VLANs, DNS, and other networking resources in a GitOps-compatible manner
Automate provisioning, reconciliation, and lifecycle management of cluster networking across hybrid and multi-environment deployments
Integrate Kubernetes networking with upstream DNS, DHCP, and IPAM systems; manage IP allocation for nodes, pods, and external interfaces
Bridge Kubernetes networks with underlay and overlay networks (VLANs, BGP), ensuring secure and controlled consumption of external networks
Partner with hardware engineering teams on NIC configuration, firmware validation, and network device consistency across platforms
Implement and enforce network security controls, including encryption, network policies, and multi-CNI isolation
Integrate and maintain network observability using tools such as Cilium Hubble, Prometheus, and custom metrics; validate performance and reliability
Collaborate closely with DevOps, SRE, and Hardware Engineering teams to align networking architecture with platform and product requirements
Produce and maintain clear documentation, including networking architecture, CRDs, operators, runbooks, and provide knowledge transfer on advanced networking topics

Qualification

Kubernetes/K3s networkingGo programmingMultusCiliumCalicoBare-metal load balancingIPAMDNS/DHCP integrationAdvanced Linux networkingNetwork securityTroubleshooting skillsC/C++ experienceDocumentation skills

Required

Bachelor's degree in Computer Science, Engineering, or equivalent practical experience
8-10 years of software/network engineering experience with deep expertise in Kubernetes/K3s networking
Proven, hands-on experience with Multus, Cilium and/or Calico, and bare-metal load balancing using MetalLB (BGP)
Strong proficiency in Go and Kubernetes controller/operator development (Kubebuilder, controller-runtime, Operator SDK)
Solid experience with IPAM, DNS/DHCP integration, VLAN configuration, and integrating external networks into Kubernetes environments
Advanced Linux networking knowledge (netlink, iproute2, eBPF)
Excellent troubleshooting skills across pod, node, and external network layers
Strong understanding of network security, including RBAC, network policies, encryption, and multi-network Kubernetes deployments
Experience working with C/C++ in systems or networking contexts

Company

Belcan is a engineering services company offering design, manufacturing, and IT solutions for aerospace, defense, automotive, and more.

Funding

Current Stage
Late Stage
Total Funding
unknown
2024-06-10Acquired

Leadership Team

leader-logo
Dave Brandel
President & COO, Engineering Solutions
linkedin
leader-logo
David Moya
DIRECTOR OF OPERATIONS
linkedin
Company data provided by crunchbase