Job Description & SummaryJob SummaryPwC IT Services Limited provides shared technology services to the PwC network of member firms in a secure, legally compliant, efficient and transparent manner.The Containers and Provisioning Operations Director will be a member of the Global Hosting Services (GHS) Platform Operations team and comes to the organization having experience in container technologies, including expertise operating a multitude of Kubernetes clusters in production, service mesh, multi-cluster management tools such as Rancher or Rafay, vulnerability management tools such as Prisma Cloud Compute or Aqua Security, infrastructure as code (IaC) tools such as Terraform or Pulumi, extensive cloud experience with Azure and other clouds, DevOps / CI/CD tools, application development, observability (logging, monitoring, alerting), ITIL and Agile methodologies, and people management of multiple tiers.The role holder will be responsible for leading both the Containers team and the Provisioning team which each have team leads to handle the day-to-day operations. You will drive strategy, lifecycle management, roadmapping, leadership reporting, continuous improvement, performance management, stakeholder management, metrics collection and reporting, and escalations.Some examples of activities include:Planning and completing goals and objectives across the Containers and Provisioning teams for each fiscal yearDriving strategy and thought leadership among your teams and peersHosting regular customer feedback sessions and retrospectivesHolding regular one-on-ones with each team memberProviding team member performance feedback to leadership to make decisions on bonuses and career progressionHandling licensing renewals for Rancher (or its successor), Prisma Cloud ComputeManaging the lifecycle for the Clusters-as-a-Service (CLaaS) and Containers-as-a-Service (CaaS) services, including Kubernetes upgrades, disaster recovery (DR), Rancher instance upgrades, Prisma Cloud Compute upgrades, support cases, observability, and customer communicationsUnderstanding and implementing key metrics of success for operating services in an enterprisePrioritizing each team’s work to meet business objectives and maximize value to the network of firmsCommunicating your vision, mission, and values to your people and leadership to drive alignmentServing as the escalation point across all of your teams and rapidly unblocking issuesEnsuring software engineering best practices are being followedSetting standards for container security, deployment methodology, vulnerability remediation, and infrastructure as codeCreating complex business process diagrams that clearly communicate concepts to stakeholdersManaging vendor relationships for both technology and resourcesLeading optimization of cloud resources to drive down costs for PwC and your customersJob Requirements and PreferencesBasic QualificationsMinimum Degree Preferred: Bachelors DegreeMinimum Years of Experience: years in IT and 4 years working with Kubernetes and TerraformPreferred CertificationsCertified Kubernetes Administrator (CKA)Certified Kubernetes Security Specialist (CKS)Certified Kubernetes Application Developer (CKAD)HashiCorp Certified: Terraform AssociatePreferred Knowledge/SkillsAt least 5 years of experience in an operations roleAt least 5 years of experience managing othersExcellent communication skillsUnderstanding and implementing key metrics of success for operating services in an enterpriseUnderstanding of Kubernetes, Docker, container images, and container security;Understanding of cloud-native concepts and the Cloud Native Computing Foundation (CNCF) Landscape;Understanding of at least one cloud provider and its underlying container services;Amazon Web ServicesAmazon Elastic Kubernetes Service (EKS)Amazon Elastic Container Service (ECS)AWS FargateMicrosoft AzureAzure Kubernetes Service (AKS)App ServiceContainer InstancesGoogle CloudGoogle Kubernetes Engine (GKE)Cloud RunWorking knowledge of at least one Kubernetes distribution;Amazon Elastic Kubernetes Service (EKS)Azure Kubernetes Service (AKS)Google Kubernetes Engine (GKE)Rancher / Rancher Kubernetes Engine (RKE) / K3sRed Hat OpenShiftVMware Tanzu Kubernetes Grid (TKG)Mirantis Kubernetes EngineNutanix KarbonRafaySpectro Cloud PaletteWorking knowledge of at least one service mesh technology;IstioLinkerdKong Mesh / Kong KumaHashiCorp Consul ConnectAWS App MeshOpenShift Service Mesh (Red Hat)Open Service Mesh (OSM)Demonstrating Familiarity with at least one Kubernetes security tool;Aqua Platform / Container Security / Kubernetes Security / Dynamic Threat AnalysisPrisma Compute (previously Twistlock)Qualys Container SecuritySnyk Cloud Native Application Security (CNAS)StackRox Kubernetes Security PlatformSysdig SecureDemonstrating Familiarity with at least one container image scanning tool;AnchoreAqua Security / TrivyClairDagdaFalcoJFrog XrayQualys Container SecuritySnyk ContainerWorking knowledge of at least one container registry;Amazon Elastic Container Registry (ECR)Azure Container Registry (ACR)GitLab Container RegistryGoogle Cloud Container RegistryHarborJFrog Container RegistryPossessing Intimate understanding of the typical Kubernetes resources and how to create manifests defining them;ConfigMapDaemonSetDeploymentIngressPersistentVolume (PV)PersistentVolumeClaim (PVC)PodReplicaSetSecretServiceStatefulSetWorking knowledge of at least one Container Network Interface (CNI) driver;Amazon VPC CNIAzure CNICalicoCanalCiliumFlannelGKE CNIWeaveWorking knowledge of at least one Container Storage Interface (CSI) driver;AWS Elastic Block Storage (EBS)AWS Elastic File System (EFS)AWS FSx for Lustre (FSX)Azure DiskAzure FileCephFSCeph RBDGCE Persistent DiskGoogle Cloud FilestoreGoogle Cloud StorageGlusterFSLonghornMinioNetAppNutanixOpenEBSPortworxPure Storage CSIScaleway CSIvSphereDemonstrating Intimate understanding of cloud networking concepts, including best-practices networking models and security;Understanding of microservice architecture and best practices;Working knowledge of creating a Dockerfile to build an OCI-compliant Docker / container image;Demonstrating the Ability to automate processes using Continuous Integration / Continuous Delivery (CI/CD) tools;AirflowArgo CDAWS CodePipelineAzure DevOpsCircleCICodefreshConcourseFlux CD / FlaggerGitHub ActionsGitLabHarnessJenkins / Jenkins XSpinnakerTektonTravis CIUnderstanding of observability in Kubernetes using three or more tools from the following listPrometheusGrafanaAlertmanagerElasticsearchFluentd / Fluent BitKibanaAppDynamicsDatadogDynatraceNew Relic OneSplunkSumo LogicWorking knowledge of all the following command line interface (CLI) tools;githelmkubectlPossessing expert working knowledge of YAML syntax;Possessing Intimate diagramming skills using one or more of the following tools;CoggleCreatelydraw.io / diagrams.netLucidchartMicrosoft VisioMiroOmniGraffleDemonstrating the ability to empathize with customers and respectfully engage stakeholders to align on goals, business objectives, timelines, and execution plan;ResponsibilitiesPlanning and completing goals and objectives across the Containers and Provisioning teams for each fiscal yearDriving strategy and thought leadership among your teams and peersHosting regular customer feedback sessions and retrospectivesHolding regular one-on-ones with each team memberProviding team member performance feedback to leadership to make decisions on bonuses and career progressionHandling licensing renewals for Rancher (or its successor), Prisma Cloud ComputeManaging the lifecycle for the Clusters-as-a-Service (CLaaS) and Containers-as-a-Service (CaaS) services, including Kubernetes upgrades, disaster recovery (DR), Rancher instance upgrades, Prisma Cloud Compute upgrades, support cases, observability, and customer communicationsUnderstanding and implementing key metrics of success for operating services in an enterprisePrioritizing each team’s work to meet business objectives and maximize value to the network of firmsCommunicating your vision, mission, and values to your people and leadership to drive alignmentServing as the escalation point across all of your teams and rapidly unblocking issuesEnsuring software engineering best practices are being followedSetting standards for container security, deployment methodology, vulnerability remediation, and infrastructure as codeCreating complex business process diagrams that clearly communicate concepts to stakeholdersManaging vendor relationships for both technology and resourcesLeading optimization of cloud resources to drive down costs for PwC and your customers
