Platform DevOps Engineer – Kubernetes/OpenShift, SRE

HCL Technologies Limited; Amsterdam; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Vacation up to 20 days

Term life insurance

Business Travel insurance

Job summary

HCL Technologies Limited in Amsterdam is seeking an experienced platform engineer to design and operate containerized access services, implement secure tenant isolation, and build scalable CI/CD pipelines for an immutable infrastructure model. You will work across security, IAM, and observability to enable reliable, auditable services.

The role requires hands-on Kubernetes/OpenShift, Go and Python development, and strong Linux and IaC skills.

Qualifications

• 3+ years hands-on experience with Kubernetes/OpenShift in production (deployment, networking, RBAC, persistent storage, operators)
• Proficiency in Go and Python for platform service development, automation, and tooling
• Strong Linux systems engineering (SSH, networking, security hardening, systemd)
• Container orchestration and CI/CD pipeline design (Helm, ArgoCD, Tekton, or equivalent)
• S3-compatible object storage (MinIO or AWS S3): presigned URLs, bucket policies, IAM integration
• Azure DevOps for backlog management, CI/CD pipelines, and release workflows
• Infrastructure as Code: Terraform, Ansible, or equivalent
• Understanding of security principles: zero-trust, defence-in-depth, protocol insulation, MFA, credential management
• Experience with IAM systems, directory services integration, and conditional access policies
• Familiarity with logging and monitoring stacks (Kafka, Elasticsearch, Prometheus/Grafana)

Responsibilities

• Design and operate the interactive access service based on Apache Guacamole, containerized on OpenShift, translating HTTPS to native protocols (SSH, RDP, SQL, VNC)
• Build and maintain the file transfer service using S3 presigned URLs with time-bound expiry and tenant-scoped bucket/path access controls
• Engineer tenant isolation within shared SaaS-style deployments, ensuring each consuming team only accesses their own targets through predefined connections and network-level controls
• Design credential lifecycle automation: retrieval/seeding at session start, reset/removal at session stop, integrated with Privileged Access Management and credential stores
• Build session recording and logging pipelines shipping audit data to tenant-specified log repositories (Kafka, S3, Git)
• Implement metering and billing event generation for per-tenant consumption tracking
• Develop CI/CD pipelines for automated platform lifecycle management: provisioning, start, stop, decommissioning (immutable infrastructure / cattle model)
• Collaborate with security teams to refine detection scenarios every sprint and maintain audited control reporting (Seven IT Risk Controls, COBIT framework)
• Define and monitor SLIs/SLOs: start latency, session success rate, recording completeness, tenant isolation violations, credential reset compliance]
• Nice to Have: Experience with Privileged Access Management tooling, Apache Guacamole or similar remote access gateways, RDP/Windows Server admin, regulated financial services exposure, network segmentation expertise

Skills

Kubernetes/OpenShift

Go

Python

Linux

CI/CD pipelines

Helm/ArgoCD/Tekton

S3-compatible storage

Azure DevOps

Infrastructure as Code

Security principles

IAM systems

Logging/Monitoring

Tools

OpenShift

Terraform

Ansible

Kafka

Elasticsearch

Prometheus/Grafana

Job description

HCL Technologies Limited in Amsterdam is seeking an experienced platform engineer to design and operate containerized access services, implement secure tenant isolation, and build scalable CI/CD pipelines for an immutable infrastructure model. You will work across security, IAM, and observability to enable reliable, auditable services.

The role requires hands-on Kubernetes/OpenShift, Go and Python development, and strong Linux and IaC skills.