Software Engineering Technical Leader - SRE Security Architect Kubernetes AWS Terraform 13 Years Bangalore

Cisco; Bengaluru Urban; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Cisco is seeking a Software Engineer for Site Reliability Engineering – Security in Bengaluru to define secure, scalable infrastructure and developer platforms. You will influence security posture across Kubernetes, GitOps, CI/CD, and observability stacks while embedding Zero Trust and automated compliance into daily operations.

The role emphasizes deep architectural ownership, collaboration with cross-functional teams, and leadership in security-driven reliability.

Qualifications

• Bachelor's, Master's, or PhD with several years of related experience.
• Hands-on production experience operating and scaling cloud environments (AWS/Azure/GCP) with cloud security ownership.
• 3+ years building production automation tooling in Python and/or Go for security use cases.
• 5+ years applying SRE practices in production, including SLIs/SLOs and incident command.
• 5+ years applying security fundamentals in production environments.

Responsibilities

• Design secure, scalable infrastructure and developer platforms with default-embedded security controls.
• Harden Kubernetes control planes, GitOps systems, CI/CD pipelines, and observability stacks.
• Drive Zero Trust through workload identity and continuous verification.
• Own reliability and security posture of critical services like secrets management, PKI, and IAM governance.
• Lead cross-team incident response and blameless post-mortems with permanent fixes.
• Automate security and compliance via policy-as-code and evidence collection.

Skills

Security engineering

Cloud security

SRE practices

Incident management

Automation

Python

Go

Kubernetes

OpenTelemetry

Prometheus

Grafana

Education

Bachelor's degree + 12 years

Master's degree + 8 years

PhD + 5 years

Tools

Terraform

ArgoCD

Flux

OPA

Kyverno

Checkov

tfsec

SAST

SCA

Prometheus

Grafana

OpenTelemetry

Job description

Job Description

Meet the Team

The Site Reliability Engineering – Security team makes Cisco CX Engineerings software systems secure, resilient, and fast to build on. We own the security posture of production infrastructure and of the internal platforms engineers depend on every day — Kubernetes control planes, GitOps and CI/CD pipelines, observability stacks, and AI/ML operations. We sit at the intersection of Platform, Security, Compliance, and Operations, so our work shapes how hundreds of engineers ship software. We are a small, senior, high-autonomy team that values deep technical ownership, blameless learning, and automating our way out of toil. Our largest and newest platform is Cisco IQ, the AI-powered front door to all of Ciscos Customer Experience services, so the systems you secure carry customer inventory, vulnerability detection, and support data at Cisco scale.

Your Impact

As a Software Engineer on the Site Reliability Engineering – Security team, you set the technical direction for how Cisco CX Engineering builds and operates secure infrastructure and developer platforms. You will design systems that are secure by default, drive Zero Trust adoption across infrastructure and internal tooling, and embed security signals into SRE observability and incident response so threats surface as quickly as outages do. You will advise engineering leadership and negotiate the trade-offs between security, velocity, and reliability on decisions that affect the entire organization. Success looks like measurably reduced attack surface, faster vulnerability remediation, and platforms that engineers can use safely by default without slowing down. This is a role for someone who wants their architectural decisions to outlive any single project.

• Design and build secure, scalable infrastructure and developer platforms so that security controls are embedded by default rather than bolted on later.
• Harden the platforms themselves — Kubernetes control planes, GitOps systems, CI/CD pipelines, and observability stacks — treating internal tooling as the high-value target it is.
• Drive Zero Trust at scale through workload identity, continuous verification, and micro-segmentation so access is earned rather than assumed.
• Own the reliability and security posture of critical services including secrets management, PKI, and IAM governance to keep the foundations of the environment trustworthy.
• Lead cross-team incident response and blameless post-mortems that convert both reliability and security failures into permanent fixes.
• Automate security and compliance through policy-as-code and automated evidence collection to reduce toil and shorten remediation time.

Minimum Qualifications

• Bachelors degree + 12 years of related experience, or Masters degree + 8 years of related experience, or PhD + 5 years of related experience.
• 5+ years of hands-on production experience operating and scaling at least one major cloud (AWS, Azure, or GCP), including direct ownership of cloud security posture: advanced IAM, KMS/secrets management, network controls, and CSPM or equivalent tooling.
• 3+ years building production automation and tooling in Python and/or Go applied to security use cases such as vulnerability management, secrets orchestration, compliance evidence collection, or detection integration.
• 5+ years applying SRE practices in production, including defining SLIs/SLOs, managing error budgets, serving as incident commander, and running post-mortems that drive follow-up engineering work.
• 5+ years applying security fundamentals in production environments: threat modeling, secure-by-default architecture, least-privilege and workload identity, secrets and certificate lifecycle management, and vulnerability management at scale.

Preferred Qualifications

• Hands-on production Kubernetes security experience: RBAC at scale, NetworkPolicies, Pod Security Standards, admission controllers, image signing and verification, control-plane hardening, and service mesh mTLS.
• Infrastructure-as-Code (Terraform) with policy-as-code (OPA, Kyverno, Checkov, tfsec), GitOps delivery (ArgoCD or Flux), and CI/CD security gates including SAST, SCA, image and secret scanning, SBOM generation, and artifact signing.
• Deep experience with security observability and runtime detection tooling (Falco, eBPF-based detection, SIEM, CSPM/CNAPP platforms) integrated with Prometheus, Grafana, or OpenTelemetry.
• Experience securing AI/ML workloads and MLOps pipelines, including training and inference pipeline security and model security, and applying AI/LLM capabilities to security automation with human-in-the-loop guardrails.
• Security certifications such as CISSP, CCSP, or AWS Certified Security – Specialty, paired with strong communication and influence skills and a track record of driving security and architectural decisions across organizational levels.

Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.