Job Title: K3s Network Engineer (K3s Networking & CNI/Multus Specialist)

Location: Hillsboro, Oregon  (Hybrid) (Relocation cost will be reimbursed)

Context:

The K3s NetworkEngineer will focus on networking for K3s clusters deployed across hybrid architectures (x86, ARM, accelerators). The role involves designing, implementing, and maintaining cluster networking that integrates with external systems. This includes writing Kubernetes controllers, managing IP address allocation, configuring VLANs outside of K3s and exposing them inside, extending networking with Multus CNI, and ensuring clusters support advanced CNI (Cilium/Calico) and bare-metal load balancing. The engineer ensures application and infrastructure networking is reliable, scalable, and secure.

Responsibilities

Cluster Networking Architecture

• Design and implement networking for K3s hybrid clusters with support for multi-interface and multi-network scenarios.
• Configure, extend, and optimizeCNI plugins, with a focus on Multus and Cilium/Calico.
• Enable workloads to use VLAN-backed networks, SR-IOV, or multiple interfaces when required.
• Deploy and managebare-metal load balancers (e.g., MetalLB, BGP) for reliable service exposure.

Controller & Operator Development

• Developcustom Kubernetes controllers/operators to manage networking resources declaratively (e.g., IP pools, VLAN assignments, DNS records).
• Automate network provisioning and reconciliation logic across hybrid environments.
• Ensure CRDs and controllers integrate cleanly withGitOps pipelines and declarative workflows.

IP & DNS Management

• Integrate cluster networking withupstream DNS servers for service discovery and external resolution.
• ManageIP address allocation across nodes, pods, and external interfaces.
• Implement IPAM solutions that handle hybrid hardware and multi-tenant use cases.

Hybrid Network Integration

• Bridge cluster networking withunderlay/overlay networks (e.g., VLANs, BGP).
• Ensure external VLANs can be safely consumed by workloads within K3s.
• Work with hardware teams on NIC configuration and firmware support for consistent network naming.

Security & Observability

• Implementnetwork policies, encryption, and isolation across multiple CNIs.
• Integrate monitoring and observability for networking (e.g., Cilium Hubble, Prometheus metrics, custom metrics from controllers).
• Validate that network paths comply with security and compliance requirements.

Collaboration & Documentation

• Work closely with DevOps, SRE, and Hardware teams to align networking design with PaaS requirements.
• Document networking architecture, CRDs, controllers, and operational runbooks.
• Provide knowledge transfer to internal teams on advanced networking withMultus, VLANs, and bare-metal load balancers.

Deliverables

• Multus-enabled K3s networking stack supporting multiple interfaces and VLAN-backed workloads.
• Functional deployment ofCilium/Calico with advanced policies and observability.
• Reliablebare-metal load balancing with MetalLB or BGP-based solutions.
• Custom controllers/operators for IP address management, DNS integration, and VLAN assignment.
• Declarative manifests and CRDs for networking resources inGitOps workflows.
• Documentation and runbooks for networking setup, troubleshooting, and operations.

Required Skills & Experience

• Deep expertise withKubernetes/K3s networking, including CNIs.
• Hands-on experience withMultus CNI for multi-network attachment definitions.
• Strong knowledge ofCilium or Calico for advanced networking, security, and observability.
• Experience withbare-metal load balancers (MetalLB, BGP).
• Proficiency in developingKubernetes controllers/operators in Go (controller-runtime, Kubebuilder, or Operator SDK).
• Experience withIP address management (IPAM) and DHCP/DNS integration.
• VLAN configuration and bridging external networks into Kubernetes.
• Proficiency inLinux networking (netlink, iproute2, eBPF tools).
• Strong debugging skills for pod, node, and external system networking.
• Security expertise in multi-network Kubernetes (RBAC, network policies, encryption).

Nice to Have

• Experience withservice mesh (Istio, Linkerd) integrated with multi-network setups.
• Knowledge ofSR-IOV, DPDK, or high-performance networking approaches.
• Contributions to Kubernetes networking or CNI projects.

• Familiarity with multi-cluster federation and cross-site service routing.