NetSecOps Lead: Open-Source Automation & Kubernetes

ICRC; Genf; Hybrid; CHF 150,000 - 190,000; Full time

Job summary

ICRC seeks a NetSecOps Tech Lead to automate, secure, and modernize network security services across data centers, hubs and field delegations. You will drive IaC, GitOps, and open-source adoption, while bridging network engineering, DevOps and security with a focus on OpenShift and Kubernetes security.

You will mentor engineers, define standards, and work with policy-as-code, SBOM, and CVE triage. The role emphasizes responsible AI-assisted operations and strict data protection.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering or a related field.
• 10+ years in network, DevOps, platform, SRE or security engineering roles, including at least 3 years in a lead or senior role.
• Experience with Kubernetes, OpenShift and container security best practices.
• Excellent written and spoken English; French is a plus.

Responsibilities

• Own the network and security automation strategy: IaC and GitOps workflows across firewall, ZTNA, SD-WAN, DNS/IPAM and load-balancing.
• Adopt open-source network and security solutions and provide build-versus-buy input.
• Secure networking for Kubernetes and container platforms, including policy, micro-segmentation and certificate lifecycle.
• Embed security into automation (DevSecOps) and ensure auditability and traceability.
• Provide observability with open-source telemetry and dashboards for Network and Security teams.

Skills

Ansible

Terraform

Python

GitOps

Azure DevOps

Education

Bachelor’s or Master’s degree in Computer Science or related field

Tools

OPNsense

Kubernetes

Linux

OpenShift

Fortinet

Job description

ICRC seeks a NetSecOps Tech Lead to automate, secure, and modernize network security services across data centers, hubs and field delegations. You will drive IaC, GitOps, and open-source adoption, while bridging network engineering, DevOps and security with a focus on OpenShift and Kubernetes security.

You will mentor engineers, define standards, and work with policy-as-code, SBOM, and CVE triage. The role emphasizes responsible AI-assisted operations and strict data protection.