Platform Engineer - Kubernetes, CI/CD & Security

HCL Technologies Limited; Amsterdam; On-site; EUR 90,000 - 150,000; Full time

Benefits offered by this job

20 days vacation per year

Health and travel insurance

Global, diverse team culture

Job summary

HCL Technologies Limited in the Netherlands is seeking a skilled platform engineer to design and operate the interactive access service based on Apache Guacamole, containerized on OpenShift, translating HTTPS to native protocols (SSH, RDP, SQL, VNC). You will build and maintain the file transfer service using S3 presigned URLs and implement tenant isolation in shared SaaS deployments.

Collaborate with security teams to refine detection scenarios, define SLIs/SLOs, and ship logging and metering

Qualifications

• 3+ years hands-on experience with Kubernetes/OpenShift in production.
• Proficiency in Go and Python for platform service development and automation.
• Strong Linux systems engineering including SSH, networking and security hardening.
• CI/CD pipeline design and implementation using Helm, ArgoCD, Tekton or equivalent.
• Experience with S3-compatible storage, presigned URLs, IAM integration.
• Infrastructure as Code tooling: Terraform, Ansible, etc.
• Knowledge of security principles: zero-trust, MFA, credential management.
• Experience with IAM systems and conditional access policies.
• Familiarity with logging/monitoring stacks (Kafka/Elasticsearch/Prometheus).

Responsibilities

• Design and operate interactive access service based on Apache Guacamole on OpenShift (SSH/RDP/SQL/VNC).
• Build and maintain file transfer service using S3 presigned URLs with time-bound expiry.
• Engineer tenant isolation within shared SaaS-style deployments with predefined connections.
• Design credential lifecycle automation and integrate with Privileged Access Management.
• Build session recording and logging pipelines to tenant log repositories (Kafka/S3/Git).
• Implement metering and billing event generation for per-tenant usage.
• Develop CI/CD pipelines for platform lifecycle management (provisioning, start, stop, decommissioning).
• Collaborate with security teams to refine detection scenarios and audit trails.
• Define and monitor SLIs/SLOs (latency, success rate, recording completeness, isolation).

Skills

Kubernetes/OpenShift

Go/Python

Linux systems

CI/CD pipelines

S3-compatible storage

Azure DevOps

Infrastructure as Code

IAM & security

Monitoring & logging

Tools

Terraform

Ansible

Helm

ArgoCD

Tekton

MinIO/AWS S3

Job description

HCL Technologies Limited in the Netherlands is seeking a skilled platform engineer to design and operate the interactive access service based on Apache Guacamole, containerized on OpenShift, translating HTTPS to native protocols (SSH, RDP, SQL, VNC). You will build and maintain the file transfer service using S3 presigned URLs and implement tenant isolation in shared SaaS deployments.

Collaborate with security teams to refine detection scenarios, define SLIs/SLOs, and ship logging and metering