Kubernetes and Container Platform Security Specialist

Skills

About the Role

You will be the technical authority on Kubernetes and container platform security. You will own the security design of the Kubernetes offering and registry, define tenant isolation and hardening baselines as policy-as-code, design network security with the network team, specify detection requirements, triage advisories and support compliance evidence. This is a securing role, not a platform operations role.

Requirements

• Strong production Kubernetes and Linux experience
• Experience of multi-tenant Kubernetes
• Deep understanding of Kubernetes architecture, container runtime and image security
• Strong Kubernetes networking including CNI policy design
• Policy-as-code, admission control and software supply chain security knowledge
• Ability to write standards and influence engineering teams
• Research mindset
• Comfortable deciding with incomplete information

Responsibilities

• Own security design of the Kubernetes offering, container registry and registry credentials
• Own the tenant isolation model on shared Kubernetes infrastructure
• Own the GPU-specific security surface including device plugins and partitioning
• Define the Kubernetes hardening baseline as policy-as-code
• Design the Kubernetes network security model with Network Security
• Specify runtime detection requirements and scope red team assessments
• Judge ecosystem advisories, set remediation priority and research new technology
• Support compliance with technical evidence and audit support

Benefits

• Cash and equity compensation
• Local benefits
• Remote work from EU option