Senior Kubernetes Engineer – DevSecOps

DMAIC Academy & Consultancy; India; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

DMAIC Academy & Consultancy in India is seeking a Senior Kubernetes Engineer – DevSecOps to own secure, scalable GitOps-driven Kubernetes infrastructure across multi-cloud environments. The role sits at the intersection of Platform Engineering, Cloud Infrastructure, Kubernetes and Security.

You will design and operate multi-cluster Kubernetes clusters (GKE/AKS/EKS), implement IaC (Terraform/OpenTofu) and embed security gates into CI/CD pipelines, mentoring juniors and partnering with security

Qualifications

• Production experience with ArgoCD or Flux in multi-cluster environments.
• Strong Terraform/OpenTofu experience for multi-cloud provisioning.
• Hands-on GitHub Actions with reusable workflows and security gates.
• Knowledge of IAM, network security, secrets management and policy-as-code.
• Production experience with at least two of GKE / AKS / EKS.
• Container image scanning and CVE triage/remediation.

Responsibilities

• Design, deploy and maintain Kubernetes clusters across multi-clouds (GKE/AKS/EKS).
• Own and evolve ArgoCD-based GitOps/CD pipelines across clusters and environments.
• Build IaC using Terraform/OpenTofu and maintain CI/CD pipelines with security gates.
• Implement cloud security controls: IAM/RBAC, network policies and secret management.
• Drive container vulnerability management and CVE remediation.
• Define Kubernetes security baselines using PS, admission controllers, OPA/Gatekeeper or Kyverno.
• Troubleshoot production incidents in multi-cloud Kubernetes environments.
• Collaborate with security teams on threat modelling and audit readiness.
• Mentor junior engineers on GitOps and security best practices.

Skills

Kubernetes

ArgoCD / Flux

GitOps

Terraform / OpenTofu

GitHub Actions

DevSecOps

Cloud Security

GKE / AKS / EKS

Container Security

IAM/RBAC

Helm / Kustomize

Tools

ArgoCD

Flux

Terraform

OpenTofu

GitHub Actions

Kubernetes

Helm

Kustomize

OPA/Gatekeeper

Kyverno

Job description

We are looking for an experienced Senior Kubernetes Engineer – DevSecOps to join our team and take ownership of secure, scalable, GitOps-driven Kubernetes infrastructure across multi-cloud environments.

This role sits at the intersection of Platform Engineering, Cloud Infrastructure, Kubernetes and Security, with responsibility for building and hardening Kubernetes platforms, automating infrastructure through IaC, and embedding security controls directly into CI/CD pipelines.

What You’ll Do

• Design, deploy and maintain Kubernetes clusters – GKE, AKS and EKS
• Own and evolve ArgoCD-based GitOps/CD pipelines across multiple clusters and environments
• Build and maintain Infrastructure as Code using Terraform / OpenTofu
• Develop GitHub Actions CI/CD pipelines, including security scanning gates
• Implement cloud security controls covering IAM/RBAC, network policies, secrets management and policy-as-code
• Drive container vulnerability management and CVE remediation
• Define Kubernetes security baselines using Pod Security Standards, admission controllers, OPA/Gatekeeper or Kyverno
• Troubleshoot production incidents across multi-cloud Kubernetes environments
• Work with security teams on threat modelling, SOC2/ISO27001 compliance and audit readiness
• Mentor junior engineers on GitOps and security best practices

Must-Have Skills

Kubernetes | ArgoCD / Flux | GitOps | Terraform / OpenTofu | GitHub Actions | DevSecOps | Cloud Security | GKE / AKS / EKS | Container Security | IAM/RBAC | Helm / Kustomize

Candidates should have:

• Production experience with ArgoCD or Flux, including multi-cluster/multi-tenant environments
• Strong Terraform/OpenTofu experience covering module design, state management and multi-cloud provisioning
• Hands‑on GitHub Actions experience with reusable workflows, self‑hosted runners and security gates
• Strong knowledge of IAM, network security, secrets management and policy‑as‑code
• Production experience with at least two of GKE / AKS / EKS
• Container image scanning and CVE triage/remediation experience

Good to Have

Experience with OPA/Gatekeeper, Kyverno, Istio/Linkerd, Prometheus, Grafana, Falco, Wiz, Prisma Cloud, Aqua, Defender for Cloud, along with Python/Go/Bash scripting and exposure to CIS Benchmarks, NIST or SOC2.

CKA/CKS, Terraform Associate or Cloud Security certifications are advantageous but not mandatory.

Who We’re Looking For

• We’re particularly interested in engineers who have owned production Kubernetes environments, not just supported them. You should be comfortable working across Kubernetes + GitOps + IaC + Multi‑Cloud + Security, with demonstrated ownership of GitOps‑driven multi‑cloud environments. Previous experience in a security‑focused or DevSecOps role is preferred.