DevSecOps Platform Engineer: Multi-Cloud K8s & IaC

Cloudera; Kalisz; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Generous PTO

Flexible WFH

Wellness program

Reimbursement for phone/internet

Career development

Benefits package

Job summary

Cloudera is seeking a DevSecOps Platform Engineer to build an enterprise-grade, Everything-as-Code operating platform. Design and maintain multi-cloud Kubernetes foundations (AWS EKS / Azure AKS), enforce keyless workload identity, and implement zero-trust service mesh perimeters.

You will work with IaC primitives, GitOps (ArgoCD/Flux), Open Policy Agent (Rego), and telemetry pipelines to shape policy-gated deployment and secure infrastructure across environments.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field or equivalent experience.
• 5+ years of deep experience operating production Kubernetes (Amazon EKS, Azure AKS) and container security frameworks.
• Advanced hands-on experience configuring Istio / Envoy service meshes, mTLS, and edge API gateways.
• Practical expertise writing Open Policy Agent (OPA) rules in Rego for gating, admission controllers, or access governance.
• High proficiency with Terraform (modular structure design) and pull-based GitOps tools (ArgoCD or Flux).
• Hands-on experience with OIDC identity federation, HashiCorp Vault, and short-lived secret workflows.

Responsibilities

• Two-Tier IaC Platform Primitives: Design, provision, and maintain modular Terraform primitives and GitOps patterns for multi-cloud Kubernetes clusters (EKS/AKS).
• Service Mesh & Edge Control Planes: Operate Istio/Envoy service mesh topologies across multi-gateway perimeters (Public Ingress, B2B Ingress, Egress).
• Policy-as-Code Gating: Author and maintain Open Policy Agent (OPA / Rego) policies to enforce pre-flight deployment checks and time-bound access gates.
• Out-of-Band Telemetry Exhaust: Configure OpenTelemetry collectors and Envoy sidecar proxies to emit telemetry logs across network hops.
• GitOps Scaffolding & Linter Governance: Manage ArgoCD and construct automated linters to enforce repository standards across teams.

Skills

Kubernetes

Terraform

GitOps

Service Mesh

OPA/ Rego

IaC

OpenTelemetry

Education

Bachelor’s degree in CS/Engineering

Tools

Terraform

ArgoCD

Flux

Istio

Envoy

OPA

Rego

Vault

OIDC

Job description

Cloudera is seeking a DevSecOps Platform Engineer to build an enterprise-grade, Everything-as-Code operating platform. Design and maintain multi-cloud Kubernetes foundations (AWS EKS / Azure AKS), enforce keyless workload identity, and implement zero-trust service mesh perimeters.

You will work with IaC primitives, GitOps (ArgoCD/Flux), Open Policy Agent (Rego), and telemetry pipelines to shape policy-gated deployment and secure infrastructure across environments.