Senior Kubernetes Security Engineer

XpertDirect; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

XpertDirect in Berlin is seeking a Senior Kubernetes Security Engineer to secure the container platform behind production AI and ML workloads.

You will design workload identity, implement admission controls, and build policy guardrails using OPA and Kyverno, while collaborating with Platform and AI Infra teams to ensure secure configurations by default.

Qualifikationen

• 5+ years of experience in Kubernetes, platform engineering, cloud security or similar roles.
• Strong understanding of IAM and workload identity.
• Solid Linux and cloud-native security fundamentals.

Aufgaben

• Secure Kubernetes clusters supporting production AI workloads.
• Design workload identity and least-privilege access controls.
• Build policy-as-code guardrails using OPA and Kyverno.
• Implement Kubernetes admission-control policies.
• Strengthen container and pod security across production environments.
• Build runtime detection and protection using Falco.
• Secure AWS IAM integration across Kubernetes workloads.
• Embed security controls into Terraform and infrastructure automation.
• Automate cluster security validation, enforcement, and remediation.
• Partner with Platform and AI Infrastructure engineers to make secure configurations the default.

Kenntnisse

Kubernetes

Platform Engineering

Cloud Security

DevSecOps

IAM

Workload identity

Tools

Falco

Trivy

Vault

Terraform

AWS EKS

Go

Python

Jobbeschreibung

AI Infrastructure | Kubernetes Security | Platform Security | Cloud-Native Security

Our client, a growing AI Infrastructure company based in Berlin, is looking for a Senior Kubernetes Security Engineer to secure the container platform behind its production AI and machine learning workloads.

What You'll Work On

• Secure Kubernetes clusters supporting production AI workloads
• Design workload identity and least-privilege access controls
• Build policy-as-code guardrails using OPA and Kyverno
• Implement Kubernetes admission-control policies
• Strengthen container and pod security across production environments
• Build runtime detection and protection using Falco
• Secure AWS IAM integration across Kubernetes workloads
• Embed security controls into Terraform and infrastructure automation
• Automate cluster security validation, enforcement, and remediation
• Partner with Platform and AI Infrastructure Engineers to make secure configurations the default

Core Skills

• 5+ years in Kubernetes, Platform Engineering, Cloud Security, DevSecOps, or similar roles
• IAM and workload identity
• Strong Linux and cloud-native security fundamentals

Nice to Have

• Falco / runtime security
• AWS EKS
• Pod Security Standards
• Trivy or similar vulnerability tooling
• Software supply-chain security
• Secrets management / Vault
• Go or Python automation
• GPU-enabled Kubernetes or AI infrastructure experience