Sr. Solutions Architect

S2 Global, an OSI Systems Company is seeking a Sr Solutions Architect to work in its Torrance, CA location.

S2 Global is the leading provider of security screening solutions and has extensive experience in program assessment, technology deployment, operation management, image analysis and maintenance services at major events, ports, land borders and air cargo facilities. Focused on Operations, Integration and Training, S2 Global's solutions ensure that customers have the advanced technologies and sophisticated techniques to significantly increase their screening capabilities.

S2 Global seeks a Sr Solutions Architect with experience in AWS and or Azure, VMWare, Kubernetes, Tanzu and minIO that has demonstrated ability to architect, implement, and manage Kubernetes clusters utilizing VMware Tanzu technology, requiring deep expertise in containerization, Kubernetes orchestration, and familiarity with the Tanzu platform features, often working on deploying and optimizing containerized applications across hybrid cloud environments. This candidate will have hands-on knowledge of deploying, managing, and optimizing the MinIO object storage platform, including skills in configuration, scaling, security, data lifecycle management, and integration with other systems, often within a cloud-native environment; demonstrating proficiency in the MinIO API and SDKs to develop applications that leverage its storage capabilities.

This candidate will lead the design and development of the architecture and changes to it. They will own the responsibility for a successful and efficient implementation that meets organizational needs and is secure and reliable.

Tanzu Cluster Management:

• Deploying, configuring, and maintaining VMware Tanzu Kubernetes Grid (TKG) clusters across various cloud providers (AWS, Azure, GCP).
• Application Deployment and Lifecycle Management:
• Orchestrating containerized applications using Kubernetes manifests and Tanzu-specific tools to automate deployments, scaling, and updates.
• Infrastructure as Code (IaC):
• Utilizing tools like Terraform to define and manage Tanzu cluster infrastructure through declarative configuration.
• Security and Compliance:
• Implementing security best practices within Tanzu environments, including role-based access control, network policies, and image scanning.
• Monitoring and Troubleshooting:
• Proactively monitoring Tanzu cluster health and performance, identifying and resolving issues related to application deployments, network connectivity, and resource utilization.
• DevOps Integration:
• Collaborating with development teams to integrate Tanzu clusters into CI/CD pipelines for seamless application delivery.
• MinIO Deployment and Administration:
• Installing, configuring, and managing MinIO clusters on various platforms (bare metal, virtual machines, Kubernetes).
• Performance Optimization:
• Monitoring and troubleshooting MinIO performance issues, optimizing storage configurations for specific workloads.
• Data Lifecycle Management:
• Implementing policies for data retention, archiving, and deletion within MinIO.
• Security Management:
• Securing MinIO deployments through access controls, encryption, and auditing.
• Integration with Applications:
• Developing applications that leverage the MinIO API to store and retrieve data from the object storage system.
• Troubleshooting and Support:
• Investigating and resolving technical issues related to MinIO deployments.
• Work in coordination with organizational stakeholders to design and develop an architecture that securely integrates with and supports S2 Global CertScan products. The candidate will be responsible to develop and submit technical designs that meet organizational needs, and to work with stakeholders to successfully complete review and gain approval.
• The candidate will manage AWS/Azure accounts, and develop VPCs to support needs, and will implement and manage services to support these needs. The candidate will also be responsible to design and implement and administer the secure network infrastructure, and the security policies to support the needs.
• The cloud design will be a complex design that supports multiple customers around the globe and requires implementation of multiple interconnected VPCs to support reliable customer connectivity.
• The candidate will be responsible for overseeing and supporting the implementation and administration of the AWS and EC2 services and or corresponding Azure services.
• The candidate will be responsible to develop or contribute to the development and maintenance of cloud services technical design documentation, as well as operational policies and procedures.
• The candidate will be responsible for configuring and overseeing the performance of monitoring and analyzing the cloud infrastructure for performance, security, and resource utilization.
• The candidate will be accountable to develop a cost-efficient environment that is capable of tracking resource usage, and they will be responsible for tracking and reporting on the costs of consumed services.
• The candidate will be responsible for working with the Development team to securely deploy system changes to appropriate customer environments in a structured CI/CD process.
• Coordinate and administer access to cloud resources. This includes account provisioning and tracking and reporting on utilization of services by multiple customers and cost centers.
• The candidate will be responsible to develop and maintain incident response protocols, and protocols that protect the operational status of the services.
• Perform operations and administration for the cloud environment. This includes development, maintenance, operation, and administration of an AWS or Azure infrastructure that hosts Windows and Linux resources, its own domain, and data storage and database resources.
• Uphold the company's core values of Integrity, Innovation, Accountability, and Teamwork
• Demonstrate behavior consistent with the company's Code of Ethics and Conduct
• It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem
• Duties may be modified or assigned at any time to meet the needs of the business.

• Bachelor's degree in Computer Science, Engineering, or related field

• 8+ years of professional work experience in cloud service development and administration
• Strong Kubernetes Expertise: Deep understanding of Kubernetes core concepts (pods, deployments, services, ingress controllers), and experience with Kubernetes best practices.
• VMware Tanzu Knowledge: Familiarity with Tanzu Kubernetes Grid (TKG), Tanzu Application Platform (TAP), and other Tanzu components.
• Cloud Proficiency: Experience with at least one major cloud provider (AWS, Azure, GCP) and their container orchestration services.
• Infrastructure Automation: Expertise in using tools like Terraform, Ansible, or Puppet for infrastructure provisioning and configuration management.
• Containerization Skills: Thorough understanding of Docker concepts and container image management.
• Scripting and Programming: Proficiency in scripting languages (Bash, Python) for automation tasks.
• Programming Languages:
• Proficiency in at least one programming language commonly used with MinIO, such as Python, Go, Java, or C#.
• Cloud Platforms:
• Familiarity with major cloud providers (AWS, Azure, GCP) and how to integrate MinIO within those environments.
• Containerization:
• Experience with container orchestration tools like Kubernetes for deploying and managing MinIO clusters.
• System Administration:
• Strong understanding of Linux system administration principles.
• AWS Certified SysOps Administrator and/or AWS Certified Solutions Architect certifications or equivalent Azure certifications desired. Strong preferences given to people with experience in DevOps and AI/Knowledge based solutions.
• Must have experience with hybrid cloud implementations that make secure connections to on premise resources, including ICS implementations.
• Experience desired in AWS CloudFormation and/or Elastic Beanstalk for provisioning of customer environments.
• In depth experience with setup, operation, and administration of AWS or Azure storage and compute environments. Must include experience with managed and unmanaged services as well as implementation of network and security controls.
• Experience configuring and performing cloud environment monitoring for at least security, performance, and cost control.
• Detailed technical knowledge of operating system and network security in physical, virtual, container, and cloud-based (AWS or Azure) implementations is required.
• Hands-on experience in designing, developing and implementing amazon cloud infrastructure solutions that supports enterprise operations.
• Hands on experience being directly responsible for the configuration and management of firewalls and network solutions in a multi-tenant cloud environment setting.
• Experience in supporting development operations and integration of CI/CD release protocols to cloud environment.
• Good verbal and written communication skills in English.
• Demonstrated ability to work as part of a team and independently
• Experience performing limited Project Management responsibilities to plan, lead and track execution of work assignments from start to finish
• Able to reliably complete assignments with limited supervision, and to help lead the actions of others to accomplish complex or extended work assignments.
• Must be able to complete job responsibilities working with different time zones such as attending late night/early morning meetings by phone and/or web to meet global business needs
• Some domestic and international travel may be required 50%+; must be able to acquire all necessary travel documents

• Required to complete US federal background check, drug screen, and meet requirements for access to US government facilities and/or government IT networks; terms of federal contracts require US citizenship.

NOTICE TO THIRD PARTY AGENCIES

OSI Systems, Inc. and its subsidiaries (collectively "OSI") does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.

Equal Opportunity Employer - Disability and Veteran

EEO is the Law

Poster Link: http://www1.eeoc.gov/employers/upload/eeoc_self_print_poster.pdf

OSI Systems, Inc. has three operating divisions: (a) Security, providing security and inspection systems, turnkey security screening solutions and related services; (b) Healthcare, providing patient monitoring, diagnostic cardiology and anesthesia systems; and (c) Optoelectronics and Manufacturing, providing specialized electronic components and electronic manufacturing services for the Security and Healthcare divisions, as well as to external original equipment manufacturer clients for application in the defense, aerospace, medical and industrial markets, among others.