QA Engineer – Kubernetes Platform Validation (Azure Local & GCP FedRAMP)

Read Terraform, Ansible, and Helm charts fluently to understand what's deployed and why (writing IaC is not required).

Reproduce customer or production incidents in the lab, trace the path from IaC through Kubernetes to cloud resources to root cause alongside engineering, and author the regression test that prevents recurrence.

Deliberately break and recover single nodes, pods, network paths, and storage (S2D pool degrade, PVC unbound, VPN tunnel drop) to verify SLOs hold under failure.

Apply LitmusChaos, Chaos Mesh, or equivalent tooling where useful.

Verify system behavior by reading metrics, logs, and traces (Prometheus, Grafana, Loki, OpenTelemetry, Alertmanager) rather than asserting on HTTP status codes alone.

Test TLS termination, cert rotation, secret management (Cloud KMS / Secret Manager), RBAC boundaries, and container image scanning (Wiz, Prisma, or equivalent) on the GCP deployment.

Verify audit logging into GCP Cloud Logging and generate evidence aligned to FedRAMP Moderate/High control families (AC, AU, SC, SI, IA); apply the same controls on the Azure Local side wherever they cross-map.

Pair with engineers on design reviews, feature-freeze planning, and Day-2 playbooks as a peer — catching quality issues before code is written, not after.

5+ years of QA / SDET experience, including at least 2 years hands-on with Kubernetes and 1+ year in a major public cloud (Azure or GCP).

Hands-on Kubernetes: kubectl, Helm, operators, CRDs, PVCs, StatefulSets, ArgoCD or Flux, network policies, node affinity.

Azure and GCP fluency: AKS and GKE, Azure Monitor / GCP Cloud Monitoring, Key Vault / Cloud KMS, Managed Identities / Workload Identity.

Ability to read Terraform, Ansible, and Helm charts to understand deployed infrastructure and trace issues to root cause.

Test design and documentation across the full "ilities" spectrum (reliability, availability, scalability, security, observability, performance, recoverability, upgradability) in Given/When/Then style.

Observability literacy: Prometheus, Grafana, Loki, OpenTelemetry, Alertmanager.

Security and FedRAMP-aware testing: TLS/cert rotation, secret management, RBAC, container image scanning, audit-log verification, control-family evidence generation (AC, AU, SC, SI, IA).