Principal Security Engineer

Overview

We are seeking a Senior Kubernetes Engineer to join our global infrastructure team and help scale, automate, and secure our container orchestration environments across on-premises and public cloud platforms. As a Kubernetes specialist, you’ll work closely with DevOps, SRE, and security teams to deliver reliable, self-service, and production-ready Kubernetes clusters that power mission-critical applications.

Responsibilities

• Deploy, manage, and upgrade Kubernetes clusters using tools like kubeadm, EKS, AKS, GKE, or Rancher
• Implement robust RBAC, network policies, ingress controllers, and security
• Design and operate multi-cluster and multi-tenant Kubernetes environments using tools such as Rancher, Fleet, or Spectro Cloud Palette for centralized governance and policy enforcement
• Implement tenant isolation, resource quotas, and compliance controls across staging and production clusters

• Automate cluster provisioning and application deployment pipelines using Terraform, Helm, and ArgoCD
• Build reusable modules for consistent infrastructure delivery across staging and production
• Implement Kubernetes Operator patterns and custom controllers (CRDs) to automate operational tasks

CI/CD & Automation

• Integrate Kubernetes with modern CI/CD workflows for rapid, safe application delivery
• Support GitOps practices and continuous deployment automation
• Optimize CI/CD pipelines for multi-environment deployments, progressive delivery, and rollback safety (e.g., canary or blue-green strategies)

Monitoring, Logging & Troubleshooting

• Implement observability for Kubernetes using Prometheus, Grafana, Loki, and Fluentd/Fluent Bit
• Troubleshoot performance issues, failed pods, memory leaks, and cluster degradation events
• Develop resiliency and chaos testing frameworks to validate reliability and failover readiness

Cloud & Hybrid Deployments

• Operate Kubernetes workloads across AWS, Azure, GCP, and hybrid/on-prem environments
• Use tools like Velero, Kasten, or Stash for backup/restore strategies in Kubernetes
• Manage container storage platforms such as Portworx, OpenEBS, or EBS CSI drivers for persistent workloads
• Implement disaster recovery runbooks, cross-region replication, and automated failover

Security & Compliance

• Implement admission control policies, image scanning, and runtime security with tools like Kyverno, OPA/Gatekeeper, Aqua, or Falco
• Enforce CIS Benchmarks, RBAC least privilege, and compliance posture checks using tools like Kubescape or Kube-bench
• Integrate secrets management via Vault, External Secrets Operator, or cloud-native secret stores

Collaboration & Support

• Partner with application developers, SREs, and security teams to implement best practices
• Serve as a technical advisor on cloud-native architectures and containerization
• Mentor junior engineers and contribute to a Kubernetes Center of Excellence
• Lead architecture reviews, documentation, and standards development for platform operations
• Collaborate during infrastructure audits and production rollouts to ensure compliance and readiness

Required Qualifications

• 8 years of professional technical experience or 6 years plus a Master’s degree
• Experience with GitOps tools (ArgoCD, Flux).
• Observability tools like Prometheus, Grafana, ELK/EFK stack.
• Experience with service mesh technologies (Istio, Linkerd).
• Open-source contributions in Kubernetes-related projects
• Spectro cloud, Incus, Cloud 9 etc…
• Strong knowledge of Kubernetes networking internals, CNI plugins, and eBPF tools (e.g., Cilium)
• Proficiency in Go, Python, or Bash scripting for automation and tooling
• Experience integrating Kubernetes with enterprise identity providers (OIDC, LDAP, or SSO)

Certifications

• Certified Kubernetes Administrator (CKA) – Highly preferred
• Certified Kubernetes Application Developer (CKAD)
• Certified Kubernetes Security Specialist (CKS)
• AWS Certified DevOps Engineer – Professional
• Google Professional Cloud DevOps Engineer
• HashiCorp Certified: Terraform Associate
• Linux Foundation Certified System Administrator (LFCS)