Kubernetes Security Architect for Multi-Tenant Platforms

Verda; Helsinki; Hybrid; EUR 140,000 - 190,000; Full time

Benefits offered by this job

Cash and equity compensation

Fringe benefits

Global team exposure

Impactful work

Job summary

Verda in Helsinki or London is seeking a Kubernetes and Container Platform Security Specialist to own the security of Verda's Kubernetes offering: multi-node and single-node clusters, container registry, and registry credentials. The role emphasizes securing tenants and enforcing isolation between workloads, not cluster operations.

You will define security standards, hardening baselines across control plane, nodes, and runtimes, and design network and admission controls.

Qualifications

• Strong production Kubernetes and Linux experience.
• Deep understanding of multi-tenant Kubernetes and isolation requirements.
• Experience with policy-as-code and admission controllers.
• Knowledge of container security, image signing, provenance.
• Ability to define security standards and verify conformance.
• Experience with CVE analysis or upstream contribution is a plus.

Responsibilities

• Own the security design of Verda's Kubernetes offering, registry, and credentials.
• Define tenant isolation model for shared Kubernetes infrastructure.
• Oversee GPU surface security like device plugins and privileged workloads.
• Define hardening baseline for control plane, nodes, runtimes, and secrets.
• Design the network security model: CNI policies, L3/L4/L7 controls.
• Specify runtime detection requirements for SOC and red-team exercises.
• Assess advisories against Verda configurations and support audits.

Skills

Kubernetes security engineering

Linux system administration

Multi-tenant Kubernetes

Policy-as-code / admission control

Container security / image provenance

Security design & threat modeling

Job description

Verda in Helsinki or London is seeking a Kubernetes and Container Platform Security Specialist to own the security of Verda's Kubernetes offering: multi-node and single-node clusters, container registry, and registry credentials. The role emphasizes securing tenants and enforcing isolation between workloads, not cluster operations.

You will define security standards, hardening baselines across control plane, nodes, and runtimes, and design network and admission controls.