Platform DevSecOps Engineer — Kubernetes & IaC

Thales; Queenstown; On-site; NZD 140,000 - 200,000; Full time

Job summary

Thales is seeking a Senior Platform Engineer in Queenstown, NZ to drive platform engineering across Kubernetes-based infrastructure and DevOps tooling. You will design configurable Azure infrastructure, implement GitOps, and build a secure, scalable platform with self-service capabilities for developers.

You will own runtime reliability, define SLOs/SLIs, and lead incidents while collaborating across teams to deliver secure, observable, and compliant cloud-native solutions.

Qualifications

• Several years building platform or DevOps end to end, production-grade, self-service.
• Strong Kubernetes experience in production, including RBAC and admission control.
• Infrastructure-as-code practice with Terraform or Open Tofu and Git Ops delivery.
• CI/CD pipelines and release strategy knowledge (GitLab or equivalent).
• Security: least privilege, network segmentation, secrets management, supply-chain integrity.

Responsibilities

• Build cloud foundation in Terraform/Open Tofu and config Azure infra for multiple cluster profiles.
• Develop platform-as-a-service and operate observability, multi-tenancy, RBAC, governance, and FinOps.
• Create golden paths for build, test, and release ensuring security by default.
• Develop self-service interfaces for developers to provision resources.
• Own runtime reliability: define SLIs/SLOs, write runbooks, and drive incident response.

Skills

Kubernetes

Terraform

Open Tofu

GitOps

CI/CD pipelines

Go/Python/Bash

Linux

Security

Education

Bachelor's degree in computer science/IT or related field

Master's degree in CS/IT (advantageous)

Tools

Terraform

Open Tofu

Flux CD

Argo CD

GitLab pipelines

Job description

Thales is seeking a Senior Platform Engineer in Queenstown, NZ to drive platform engineering across Kubernetes-based infrastructure and DevOps tooling. You will design configurable Azure infrastructure, implement GitOps, and build a secure, scalable platform with self-service capabilities for developers.

You will own runtime reliability, define SLOs/SLIs, and lead incidents while collaborating across teams to deliver secure, observable, and compliant cloud-native solutions.