DevOps engineer for SaaS platforms

HCL Technologies Limited; Amsterdam; On-site; EUR 85,000 - 120,000; Full time

Benefits offered by this job

Vacation up to 20 days

Term life insurance

Business Travel insurance

Job summary

HCL Technologies Limited is seeking a platform engineer in Amsterdam, Netherlands. The role focuses on building and operating a containerized access gateway, secure credential management, and tenant-aware SaaS deployments.

You will drive CI/CD pipelines and collaborate with security teams to ensure compliance and reliable service delivery. Applicants should have 3+ years of hands-on Kubernetes/OpenShift experience, strong Linux, and proficiency in Go and Python.

Qualifications

• Eligible to work in Netherlands
• Fluent in Dutch and English
• 3+ years hands-on experience with Kubernetes/OpenShift in production

Responsibilities

• Design and operate interactive access service based on Apache Guacamole on OpenShift
• Build and maintain file transfer service using S3 presigned URLs
• Engineer tenant isolation in shared SaaS-style deployments
• Design credential lifecycle automation integrated with PAM and credential stores
• Build session recording and logging pipelines shipping audit data to tenants' log repositories
• Implement metering and billing event generation for per-tenant consumption
• Develop CI/CD pipelines for platform lifecycle management (provisioning, start, stop, decommission)
• Collaborate with security teams to refine detection scenarios and maintain audited reporting
• Define and monitor SLIs/SLOs: latency, success rate, recording completeness, isolation violations

Skills

Kubernetes/OpenShift in production

Go

Python

Linux systems

Security hardening

Zero-trust security

IAM concepts

Networking

RID access control

Logging/Monitoring

SRE concepts

Billing/meters

Tools

Kubernetes/OpenShift

Helm

ArgoCD

Tekton

Terraform

Ansible

Job description

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.

Задачи:

• Design and operate the interactive access service based on Apache Guacamole, containerized on OpenShift, translating HTTPS to native protocols (SSH, RDP, SQL, VNC)
• Build and maintain the file transfer service using S3 presigned URLs with time-bound expiry and tenant-scoped bucket/path access controls
• Engineer tenant isolation within shared SaaS-style deployments, ensuring each consuming team only accesses their own targets through predefined connections and network-level controls
• Design credential lifecycle automation: retrieval/seeding at session start, reset/removal at session stop, integrated with Privileged Access Management and credential stores
• Build session recording and logging pipelines shipping audit data to tenant-specified log repositories (Kafka, S3, Git)
• Implement metering and billing event generation for per-tenant consumption tracking
• Develop CI/CD pipelines for automated platform lifecycle management: provisioning, start, stop, decommissioning (immutable infrastructure / cattle model)
• Collaborate with security teams to refine detection scenarios every sprint and maintain audited control reporting (Seven IT Risk Controls, COBIT framework)
• Define and monitor SLIs/SLOs: start latency, session success rate, recording completeness, tenant isolation violations, credential reset compliance

Требования:

• Candidates must be eligible to work in Netherlands Fluent in Dutch and English.
• 3+ years hands-on experience with Kubernetes/OpenShift in production (deployment, networking, RBAC, persistent storage, operators)
• Proficiency in Go and Python for platform service development, automation, and tooling
• Strong Linux systems engineering (SSH, networking, security hardening, systemd)
• Container orchestration and CI/CD pipeline design (Helm, ArgoCD, Tekton, or equivalent)
• S3-compatible object storage (MinIO or AWS S3): presigned URLs, bucket policies, IAM integration
• Azure DevOps for backlog management, CI/CD pipelines, and release workflows
• Infrastructure as Code: Terraform, Ansible, or equivalent
• Understanding of security principles: zero-trust, defence-in-depth, protocol insulation, MFA, credential management
• Experience with IAM systems, directory services integration, and conditional access policies
• Familiarity with logging and monitoring stacks (Kafka, Elasticsearch, Prometheus/Grafana)
• Будет плюсом: VMware Cloud Foundation (VCF) experience or familiarity with VCF-based infrastructure
• Experience with Privileged Access Management tooling (CyberArk, HashiCorp Vault)
• Experience with Apache Guacamole or similar remote access gateway technologies
• RDP and Windows Server administration knowledge
• Experience in regulated financial services environments (DORA, NIS2, or equivalent regulatory frameworks)
• Understanding of network segmentation and firewall rule management
• SOC2 Type 2 reporting or equivalent security assurance frameworks
• Experience designing metering/billing event pipelines for internal platform products

Условия:

• Competitive compensation and benefits that includes up to 20 days' vacation per year, various insurances like Term life and Business Travel insurance

These are apart from the statutory benefits applicable in the country. Employee benefits are regulated by an internal policy that contains full details regarding the entitlement and conditions for the benefits as per the law of the land. Great opportunities to make the role your own, upskill yourself and get involved with exciting projects. Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks - Engagement Champion to name a few.