DevSecOps Platform Engineer — IaC & Zero-Trust Automation

Cloudera; Madrid; Híbrido; EUR 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Generous PTO Policy

Unplugged Days

Flexible WFH Policy

Mental & Physical Wellness programs

Phone and Internet Reimbursement

Continued Career Development

Comprehensive Benefits and Competitive

Paid Volunteer Time

Employee Resource Groups

Descripción de la vacante

Cloudera in Madrid is seeking a DevSecOps Platform Engineer to help build an enterprise-grade Everything-as-Code platform. You will design Terraform primitives, GitOps patterns, and multi-cloud Kubernetes foundations (EKS/AKS) while enforcing zero-trust, policy-as-code, and automated checks.

You will collaborate across security, networking, and platform teams to implement Open Policy Agent, Istio/Envoy service mesh, and ArgoCD pipelines, with a focus on scalable, auditable infrastructure and

Responsabilidades

• Two-Tier IaC Platform Primitives: Design, provision, and maintain modular Terraform primitives and GitOps patterns for multi-cloud Kubernetes clusters (EKS/AKS), software-defined networks, and pod identity layers.
• Service Mesh & Edge Control Planes: Operate Istio/Envoy service mesh topologies across multi-gateway perimeters (Public Ingress, B2B Ingress, Egress).
• Active Policy-as-Code Gating: Author and maintain Open Policy Agent (OPA / Rego) policies to enforce pre-flight deployment checks, Commit-as-Code format verification, and dynamic Just-in-Time (JIT) time-bound access escalation gates.
• Out-of-Band Telemetry Exhaust: Configure OpenTelemetry (OTel) collectors and Envoy sidecar proxies to emit uniform out-of-band JSON telemetry logs, stamping W3C traceparent headers and system primary keys (UPID, USID, correlation_id, process_id) across all network hops.
• GitOps Scaffolding & Linter Governance: Manage localized pull-based continuous delivery engines (ArgoCD) and construct automated structural linters to enforce the 10-Pillar Application Spoke Repository Standard across all engineering teams.

Conocimientos

IaC design

Kubernetes administration

Service mesh management

Policy-as-Code

GitOps workflows

Herramientas

Terraform

GitOps

ArgoCD

Istio/Envoy

OPA / Rego

Descripción del empleo

Cloudera in Madrid is seeking a DevSecOps Platform Engineer to help build an enterprise-grade Everything-as-Code platform. You will design Terraform primitives, GitOps patterns, and multi-cloud Kubernetes foundations (EKS/AKS) while enforcing zero-trust, policy-as-code, and automated checks.

You will collaborate across security, networking, and platform teams to implement Open Policy Agent, Istio/Envoy service mesh, and ArgoCD pipelines, with a focus on scalable, auditable infrastructure and