IT Production Middleware provides full life cycle support of several Middleware infrastructures for BNP Paribas North America. These infrastructures run state of the art third party software which are installed, configured, maintained and administered by the Middleware group members. Some of the technologies that Middleware is responsible for are MQ, Websphere (WAS), Axway Enterprise File Transfer, OpenShift, Kubernetes, Kafka and Monitoring for each infrastructure. In addition to the Change-the-Bank activities, the Middleware team provides a critical Run-the-Bank role for Payments, Trading, Front Office and Back Office applications spread across all business lines of Corporate Banking and Global Markets. The Middleware platform is constantly evolving to keep pace with the changes in technology, BNP Paribas' activity and processes. We are seeking an experienced Senior Middleware Infrastructure Architect to design, build, and operate high-performance, cloud native platforms based on OpenShift/Kubernetes and micro-service architectures. The role focuses on integrating and managing OpenShift/Kubernetes and messaging systems such as Apache Kafka, IBM MQ. In detail - Provide 24/7 and (when necessary) weekend support for systems involved in the architecture. - Design and implement Kubernetes clusters (on-prem) supporting micro-service workloads. - Function as Kubernetes/Docker and Messaging(Kafka/MQ) Infrastructure Engineer/Architect. - Provisioning, configuring, and upgrading Kubernetes clusters on-premise. - Configuring persistent volumes (PVs), persistent volume claims (PVCs), and container networking solutions. - Develop Helm charts, Operators, and GitOps pipelines (Argo CD, Flux) for automated deployment and lifecycle management. - Implement service mesh (Istio) and API gateway solutions (Kgateway) to secure and route traffic between services. - Architect, configure, and administer Apache and IBM MQ for high-throughput event streaming. - Evaluate, install, and manage additional messaging brokers (IBM MQ, Solace PubSub+, RabbitMQ) based on business needs. - Build CI/CD pipelines (Jenkins, GitHub Actions, Azure DevOps) that integrate container builds, security scanning, and messaging schema validation. - Implementing observability tools (Prometheus, Grafana, Dynatrace) to monitor cluster health, performance, and resource usage. - Develop best-practice guidelines for resilient micro-service patterns: circuit-breaker, bulkhead, saga, and event sourcing. - Collaborate with product owners to translate business requirements into scalable messaging topologies and data contracts (Avro/Protobuf schemas). - Mentor engineering teams on containerization, Kubernetes best practices, and messaging system operations. - Participate in on-call rotation; troubleshoot production incidents involving clusters, pods, and message queues. - Stay current with emerging technologies and evaluate their usability for future projects. - Providing Tier 1/Tier 2 support for cluster-related incidents, resolving network failures, and fixing application issues. - Strong critical thinker with problem solving aptitude. The strengths and skills that will help you succeed - Bachelor/master's degree in computer science or computer engineering - Professional working proficiency in English language is required. - 10+ years of professional experience in building and operating containerized micro-services. - Deep expertise with Kubernetes (cluster provisioning, networking, storage, security) and Helm/Operators. - Strong hands-on experience with Apache Kafka (cluster setup, replication, security, performance tuning). - Strong Knowledge and hands-on experience with IBM MQ and Solace Installation/Configuration and Setup related to SSL/Channel/Queues. - Scripting/programming in Python/Bash and Ansible/Terraform for automation. - Ability to work on on-call rotation. - Willingness to adapt to the changes constantly introduced by the Bank's dynamic environment. - Experienced as a team player working in a global team - Ability to manage conflicting requests on time in a continually fast-moving environment - Must be a self-starter with attention to detail - Good communication and interpersonal skills - Expertise in installing/configuring Kubernetes, containerd with SSL communications. - Expertise working on Linux and Bash scripting. - Proficiency in at least one scripting language (Python and/or Bash preferred) *Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply. Professional working proficiency in English language is required. While the description above describes our ideal candidate, we encourage applicants to apply even if they do not fully meet the complete list of qualifications noted What's in it for you Alongside a competitive compensation, we provide a comprehensive suite of flexible benefits designed to support your health, wellbeing, and long-term success: Health & Wellness A menu of flexible options for you and your family, including a 24/7 telemedicine service. Mental-Health Support Up to $5,000per year for sessions with mental-health practitioners, plus unlimited access through our Employee Assistance Program. Financial Benefits A defined-contribution pension plan and a range of additional financial perks. Paid Volunteering Days Take time off to give back to the community. Learning & Development Access to high-quality training, personal-development programs, and clear pathways for internal career progression across our global organization. Work-place flexibility Hybrid work is available for most roles. You'll be required in the office at least three days per week, with one of those days being either a Monday or a Friday. To find out more about our range of benefits, click here