Position Description
We are seeking an experienced Cloud Architecture and DevOps Lead to design and deliver a telecom grade private cloud platform. The role will lead the migration from VMware based infrastructure to a Kubernetes based private cloud and support the onboarding of containerized network functions, 5G Standalone Core, Ericsson ADI, and Rakuten Open RAN workloads.
The successful candidate will work across cloud architecture, Kubernetes, DevOps, networking, security, automation, and telecom platforms to establish a scalable, secure, and operationally efficient environment.
Your future duties and responsibilities
Key Responsibilities
Private Cloud and Kubernetes Architecture
- Define the target architecture for migrating VMware workloads to a Kubernetes based private cloud.
- Develop migration strategies for virtual machines, applications, and network functions.
- Design highly available Kubernetes clusters across data centres and edge locations.
- Define standards for compute, storage, networking, observability, backup, disaster recovery, and lifecycle management.
- Establish cloud native patterns for VM, container, and CNF workloads.
- Support virtualization technologies such as KubeVirt where VM workloads must continue to run on Kubernetes.
Containerization and CNF Modernization
- Lead the containerization and modernization of legacy applications and telecom network functions.
- Support onboarding, deployment, scaling, upgrades, and lifecycle management of containerized network functions.
- Define Helm, GitOps, CI/CD, image management, and configuration standards.
- Implement automated testing, release management, rollback, and version control.
- Ensure workloads meet telecom grade requirements for performance, resiliency, latency, and availability.
DevOps and Automation
- Establish DevOps and GitOps practices across infrastructure, platform, and network function delivery.
- Build automated pipelines for infrastructure provisioning, application deployment, configuration, testing, and operational changes.
- Implement Infrastructure as Code using tools such as Terraform, Ansible, and related automation frameworks.
- Integrate source control, CI/CD, security scanning, artifact repositories, and change management.
- Improve deployment frequency, operational consistency, and time to recover from failures.
Security Architecture
- Embed security into the private cloud and DevOps lifecycle.
- Define identity, access control, secrets management, certificate management, and privileged access controls.
- Implement container, image, Kubernetes, API, and supply chain security.
- Support zero trust principles, network segmentation, micro segmentation, and workload isolation.
- Establish security monitoring, vulnerability management, audit logging, compliance controls, and incident response integration.
- Collaborate with enterprise security teams to meet telecom and regulatory requirements.
Network Architecture and Integration
- Design Kubernetes networking for telecom workloads, including CNI, multus networking, service meshes, ingress, load balancing, and IP management.
- Support integration with data centre, transport, firewall, DNS, IPAM, SDN, and service assurance platforms.
- Define network performance requirements for low latency, high throughput, resiliency, and deterministic behavior.
- Support connectivity between private cloud, enterprise networks, edge locations, and telecom infrastructure.
- Develop network automation for provisioning, configuration, validation, and operational support.
Telecom Platform Onboarding
- Lead the onboarding of Ericsson ADI stack components into the private cloud environment.
- Support the deployment and integration of 5G Standalone Core network functions, including AMF, SMF, UPF, UDM, AUSF, PCF, NRF, and related services.
- Support onboarding of Rakuten Open RAN components and associated RAN, cloud, transport, and orchestration platforms.
- Validate interoperability across RAN, transport, 5G Core, OSS/BSS, inventory, orchestration, and assurance systems.
- Ensure platform designs support telecom standards, CNF lifecycle management, observability, and operational handover.
Observability and Operations
- Define observability standards for infrastructure, Kubernetes, applications, CNFs, and network services.
- Implement centralized monitoring, logging, tracing, event management, and dashboarding.
- Support integration with tools such as Prometheus, Grafana, Elastic/Kibana, Splunk, Dynatrace, or equivalent platforms.
- Establish service level indicators, service level objectives, capacity monitoring, and operational health checks.
- Enable automated fault detection, remediation, and closed loop operational processes.
Required Experience
Required qualifications to be successful in this role
- 10+ years of experience in cloud architecture, DevOps, infrastructure, or telecom engineering.
- Strong experience designing and operating Kubernetes based private cloud platforms.
- Proven experience migrating VMware workloads to Kubernetes or cloud native platforms.
- Hands on experience with containerization, Docker/OCI, Helm, Kubernetes, and CNF deployments.
- Experience with CI/CD, GitOps, Infrastructure as Code, Terraform, Ansible, and automated testing.
- Strong knowledge of cloud and telecom networking, including IP, DNS, load balancing, firewalls, SDN, CNI, and network segmentation.
- Experience implementing cloud and container security controls.
- Experience supporting 4G/5G Core, 5G Standalone, IMS, RAN, Open RAN, or telecom cloud platforms.
- Experience with Ericsson platforms, Rakuten/Open RAN, or comparable telecom vendors is highly desirable.
- Experience with telecom grade availability, disaster recovery, performance, and lifecycle management.
Preferred Technical Skills
- Kubernetes, OpenShift, Rancher, VMware Tanzu, or equivalent platforms
- KubeVirt or other VM on Kubernetes technologies
- Docker, containerd, CRI O, Helm, Operators, and CNF orchestration
- Terraform, Ansible, Argo CD, GitLab CI/CD, Jenkins, or equivalent
- Linux, Python, Bash, and API based automation
- Multus, Calico, Cilium, SR IOV, DPDK, and Kubernetes networking
- Ericsson 5G Core, ADI, Cloud RAN, or related platforms
- Rakuten Open RAN and cloud native RAN components
- Prometheus, Grafana, Elastic/Kibana, Dynatrace, or equivalent observability tools
- TM Forum, 3GPP, ETSI, and telecom cloud standards
Key Deliverables
- Target state private cloud and Kubernetes architecture
- VMware to Kubernetes migration roadmap
- Containerization and CNF onboarding framework
- Security and network architecture
- DevOps, CI/CD, GitOps, and Infrastructure as Code framework
- Ericsson ADI and 5G SA Core onboarding plan
- Rakuten Open RAN integration and deployment plan
- Observability and operational support model
- Platform performance, resiliency, and disaster recovery strategy
- Documentation, standards, runbooks, and knowledge transfer materials
Success Measures
- Successful migration of priority VMware workloads to the private cloud
- Secure and repeatable onboarding of containerized network functions
- Operational readiness of Ericsson ADI, 5G SA Core, and Rakuten Open RAN platforms
- Improved deployment speed, automation, and service reliability
- Reduced manual operational effort and configuration errors
- Demonstrated security, resiliency, observability, and lifecycle management capabilities
CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $115,000–$165,000. This role is an existing vacancy.
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.
Come join our team - one of the largest IT and business consulting services firms in the world.
