DevOps engineer in SaaS platforms

HCL Technologies Limited; Amsterdam; On-site; EUR 90,000 - 135,000; Full time

Benefits offered by this job

Vacation and insurance benefits

Job summary

HCL Technologies Limited is seeking a seasoned Platform Engineer in the Netherlands to design and operate advanced access and file transfer services. You will work on containerized platforms, implement tenant isolation, and automate credential management with PAM integration.

You will collaborate with security and SRE teams to define SLIs/SLOs, monitor performance, and ensure compliant, auditable platform operations in a dynamic environment that values security and reliability.

Qualifications

• Eligible to work in the Netherlands.
• 3+ years of hands-on Kubernetes/OpenShift production experience.
• Proficiency in Go and Python for platform development and automation.
• Strong Linux systems engineering and security hardening skills.
• Experience with Helm, ArgoCD, Tekton or equivalent CI/CD tools.
• Familiarity with S3-compatible storage and IAM integration.
• Experience with Terraform and Ansible for IaC/automation.
• Knowledge of zero-trust and defense-in-depth security principles.
• Experience with logging/monitoring stacks (Kafka, Elasticsearch, Prometheus/Grafana).

Responsibilities

• Design and operate an interactive access service using Guacamole on OpenShift.
• Build and maintain a file transfer service with presigned URLs and access controls.
• Enforce tenant isolation in shared SaaS deployments with network controls.
• Automate credential lifecycle integrated with PAM and credential stores.
• Implement session recording and logging pipelines to tenant log repositories.
• Develop metering and billing event pipelines for per-tenant usage.
• Create CI/CD pipelines for platform lifecycle management (immutable infra).
• Collaborate with security to refine detection scenarios and audits.
• Define and monitor SLIs/SLOs for latency, success, and compliance.

Skills

Kubernetes/OpenShift production

Go

Python

Linux systems engineering

CI/CD pipelines

Helm

ArgoCD

Tekton

Terraform

Ansible

Azure DevOps

IAM and security

Logging/Monitoring stacks

Apache Guacamole or remote access

RDP/Windows Server

S3-compatible storage (MinIO/AWS S3)

Networking and security hardening

Zero-trust, defence-in-depth

Tools

Kubernetes/OpenShift

Docker

Helm

ArgoCD

Tekton

Terraform

Ansible

Azure DevOps

MinIO/AWS S3

CI/CD tooling

Job description

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.

Задачи:

• Design and operate the interactive access service based on Apache Guacamole, containerized on OpenShift, translating HTTPS to native protocols (SSH, RDP, SQL, VNC)
• Build and maintain the file transfer service using S3 presigned URLs with time-bound expiry and tenant-scoped bucket/path access controls
• Engineer tenant isolation within shared SaaS-style deployments, ensuring each consuming team only accesses their own targets through predefined connections and network-level controls
• Design credential lifecycle automation: retrieval/seeding at session start, reset/removal at session stop, integrated with Privileged Access Management and credential stores
• Build session recording and logging pipelines shipping audit data to tenant-specified log repositories (Kafka, S3, Git)
• Implement metering and billing event generation for per-tenant consumption tracking
• Develop CI/CD pipelines for automated platform lifecycle management: provisioning, start, stop, decommissioning (immutable infrastructure / cattle model)
• Collaborate with security teams to refine detection scenarios every sprint and maintain audited control reporting (Seven IT Risk Controls, COBIT framework)
• Define and monitor SLIs/SLOs: start latency, session success rate, recording completeness, tenant isolation violations, credential reset compliance

Требования:

• Candidates must be eligible to work in Netherlands Fluent in Dutch and English.
• 3+ years hands-on experience with Kubernetes/OpenShift in production (deployment, networking, RBAC, persistent storage, operators)
• Proficiency in Go and Python for platform service development, automation, and tooling
• Strong Linux systems engineering (SSH, networking, security hardening, systemd)
• Container orchestration and CI/CD pipeline design (Helm, ArgoCD, Tekton, or equivalent)
• S3-compatible object storage (MinIO or AWS S3): presigned URLs, bucket policies, IAM integration
• Azure DevOps for backlog management, CI/CD pipelines, and release workflows
• Infrastructure as Code: Terraform, Ansible, or equivalent
• Understanding of security principles: zero-trust, defence-in-depth, protocol insulation, MFA, credential management
• Experience with IAM systems, directory services integration, and conditional access policies
• Familiarity with logging and monitoring stacks (Kafka, Elasticsearch, Prometheus/Grafana)
• Будет плюсом: VMware Cloud Foundation (VCF) experience or familiarity with VCF-based infrastructure
• Experience with Privileged Access Management tooling (CyberArk, HashiCorp Vault)
• Experience with Apache Guacamole or similar remote access gateway technologies
• RDP and Windows Server administration knowledge
• Experience in regulated financial services environments (DORA, NIS2, or equivalent regulatory frameworks)
• Understanding of network segmentation and firewall rule management
• SOC2 Type 2 reporting or equivalent security assurance frameworks
• Experience designing metering/billing event pipelines for internal platform products

Условия:

• Competitive compensation and benefits that includes up to 20 days' vacation per year, various insurances like Term life and Business Travel insurance

These are apart from the statutory benefits applicable in the country. Employee benefits are regulated by an internal policy that contains full details regarding the entitlement and conditions for the benefits as per the law of the land. Great opportunities to make the role your own, upskill yourself and get involved with exciting projects. Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks - Engagement Champion to name a few.