Kubernetes Security Architect – Multi-Tenant Cloud Platform

Verda; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Cash and equity compensation

Fringe benefits

Job summary

Verda, headquartered in Helsinki with London offices, is building a full-stack AI cloud. We seek a Kubernetes and Container Platform Security Specialist to own security of Verda's Kubernetes offering, including clusters, registry, and credentials.

This is a securing role focusing on security standards rather than platform operations. You will shape tenant isolation, admission controls, and network security, and work with the platform team to ensure conformance through policy-as-code.

Qualifications

• Strong Kubernetes security experience and production-grade expertise.
• Experience with multi-tenant Kubernetes infrastructure.
• Deep understanding of Kubernetes architecture and container runtimes.
• Knowledge of policy-as-code and admission controls.
• Ability to define security standards and verify conformity.

Responsibilities

• Own the security design of Verda's Kubernetes offering, registry, and credentials.
• Define tenant isolation models and boundary controls.
• Define hardening baseline across control plane, OS, container runtime, etcd and secrets.
• Design network security model with CNI policies and egress controls.
• Specify runtime detection requirements for SOC and red-team exercises.
• Assess advisories and support compliance with technical evidence.

Skills

Production Kubernetes

Multi-tenant Kubernetes

Kubernetes architecture

Kubernetes networking

Policy-as-code

Admission control

Automation mindset

Job description

Verda, headquartered in Helsinki with London offices, is building a full-stack AI cloud. We seek a Kubernetes and Container Platform Security Specialist to own security of Verda's Kubernetes offering, including clusters, registry, and credentials.

This is a securing role focusing on security standards rather than platform operations. You will shape tenant isolation, admission controls, and network security, and work with the platform team to ensure conformance through policy-as-code.