Who are we?

Equinix is the world’s digital infrastructure company®, shortening the path to connectivity to enable the innovations that enrich our work, life and planet.

A place where bold ideas are welcomed, human connection is valued, and everyone has the opportunity to shape their future.

Help us challenge assumptions, uncover bias, and remove barriers—because progress starts with fresh ideas. You’ll find belonging, purpose, and a team that welcomes you—because when you feel valued, you’re empowered to do your best work.

Job Summary

We are looking for a Senior Staff Engineer to join the Reliability Engineering team that operates a bare-metal Kubernetes platform across multiple metro locations. The platform's architecture is defined and the build is underway, you will help deploy, operate and continuously improve it, from OS provisioning on racked servers through a multi-cluster fleet managed from a central management plane, with a software-defined data plane deployed via GitOps.

This is a deliberately broad role. We are not looking for someone who owns a layer and hands everything below it across a boundary. You will work alongside the teams that own the physical hardware, the underlay network, and the data plane software, and you need enough fluency in all three to reason about a fault before escalating it. Where you find the design falls short in practice, we expect you to say so and to shape how it evolves.

You will join the Digital Interconnection Engineering organization. The team owns the full application stack for interconnection and the Kubernetes platform for the software-defined data plane across multiple metros. We operate with an automation-first, GitOps-driven culture and a strong commitment to operational rigor, documented runbooks, and blameless postmortems.

Responsibilities

OS Provisioning & Bare-Metal Infrastructure

Own OS installation (Debian/Ubuntu) across bare-metal servers in multiple metros using PXE/iPXE imaging and cloud-init, and harden the OS prior to cluster bootstrap
Build and maintain a repeatable, zero-touch provisioning pipeline so every metro is deployed consistently without manual per-node intervention
Partner with the teams that own the hardware on BIOS/firmware baselines, high-speed NIC configuration and disk layout standards (separate NVMe for etcd, SSD for OS) and be able to diagnose faults at that layer, not just report them

Kubernetes Control Plane & Worker Nodes

Deploy and operate Kubernetes clusters across all metros with quorum-based control-plane fault tolerance and correct failure-domain placement across racks, PDUs, or availability zones
Maintain the Layer 4 load balancer or keepalived VIP fronting all kube-apiserver instances, so no client depends on a single node
Manage worker node provisioning, CNI configuration, and end-to-end cluster validation before workloads are onboarded

CI/CD & Data Plane Deployment

Build and own the CI/CD pipeline that deploys the software-defined data plane, including automated throughput and latency validation gates that must pass before promotion to production. The data plane software itself is configured and troubleshot by the team that owns it, your ownership is the pipeline and the gates
Own data-plane observability: monitoring, alerting thresholds, and operational runbooks

Network

Operate on top of a multi-metro underlay and partner with network and security teams on VLANs, BGP peering, NIC bonding, private connectivity, firewall rules and segmentation
Validate connectivity end to end across environments, and troubleshoot far enough into the network layer to isolate a problem before handing it over

OS & Kubernetes Upgrades

Plan and execute rolling OS and Kubernetes upgrades across the fleet with zero unplanned downtime; maintain tested upgrade runbooks and validated etcd snapshot/restore procedures before every major change
Own the etcd snapshot schedule, retention policy, and offsite storage; verify restore runbooks before each site goes live
Apply the platform's patching cadence across the fleet, tracking CVEs affecting the OS, Kubernetes and cluster components

Management Plane

Administer the centralized management plane across all clusters, including RBAC, cluster registration and policy enforcement, and keep production and non-production management planes strictly isolated to prevent blast-radius cascades from configuration changes
Drive GitOps-based fleet configuration management to keep clusters consistent, auditable, and drift-free

On-Call & Incident Management

Own your shift of a follow-the-sun on-call rotation, and lead incident response for control-plane, data-plane, and network events
Drive blameless postmortems and systematically eliminate recurring failure modes through automation, better runbooks, and sharper alerting
Contribute to the shared incident-command process, and maintain the runbooks for the systems you operate

What Success Looks Like, First 9-12 Months

Provisioning is fully automated and repeatable, new nodes and metros brought up with no manual per-node steps
Deployment pipeline in production, with throughput and latency gates enforced before promotion
Management plane administered across all clusters; production and non-production planes isolated; GitOps driving cluster configuration
OS and Kubernetes upgrades executed on cadence across the fleet with documented, tested runbooks
etcd snapshot and restore tested and signed off before each site goes live
Observability and alerting in place for the systems you operate, including the data plane
Recurring failure modes measurably reduced through automation and runbook improvements

Qualifications

Required

OS & bare metal: Deep hands-on Linux/Ubuntu provisioning at scale, PXE/iPXE imaging, cloud-init, BIOS/firmware management, OS hardening
Hardware fluency: Comfortable with BMC/IPMI, SMART data and platform sensors; able to diagnose disk, memory, NIC and power faults and work with vendors through warranty replacement
Kubernetes: Strong experience deploying and operating RKE2 or kubeadm clusters on bare metal, etcd operations, kube-apiserver HA, CNI (Multus/SR-IOV), multi-cluster fleet management
Rancher or equivalent management plane: Production experience managing multiple clusters through Rancher Prime, Rancher, or comparable fleet tooling
CI/CD for infrastructure: GitOps or pipeline-driven infrastructure deployment, Ansible, Terraform, ArgoCD, or Fleet
Networking: Hands-on with VLANs, BGP, bonded NICs, SR-IOV and private connectivity, with enough depth to troubleshoot across the boundary rather than only consume it
Upgrades: Demonstrated zero-downtime rolling upgrades of both OS and Kubernetes across a multi-node fleet
Operational rigor: Experience running platforms where availability is measured in minutes of downtime per year, and where an unreviewed change is the most likely cause of an outage
On-call: Comfortable owning an on-call shift and leading infrastructure incident response
Automation mindset: Everything-as-code, repeatable and auditable; strong bias toward automation over manual operations

Preferred

Familiarity with 6WIND VSR or other DPDK-based data planes, enough to build and validate a deployment and performance-testing pipeline around one
SR-IOV NIC tuning and data-plane performance validation
SDN or private-connectivity platforms (Equinix Fabric, VyOS, or equivalent)
Familiarity with LLM provider APIs and AI/agent gateway proxying patterns, since inference traffic from multiple providers transits this platform
Experience operating infrastructure across geographically distributed sites

Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form .

Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.

We use artificial intelligence in our hiring process. Learn more here .

This posting is a new position within our organization.

Senior Staff Engineer, Bare Metal Kubernetes Platform

Start with your email