Security Engineer – Kubernetes, SPIFFE/SPIRE (28919)

Dahl Consulting; Brooklyn Park (MN); Hybrid; USD 103,320 - 133,627; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

A leading IT consulting firm is looking for a Security Engineer with expertise in SPIFFE/SPIRE and Kubernetes. In this hybrid role, you'll focus on implementing identity frameworks within a large enterprise environment, deploying technologies like SPIRE to enhance security across distributed systems. Strong hands-on experience is required, particularly in building and customizing workload attestors. Join us to contribute to cutting-edge projects in a dynamic setting.

Qualifications

• Hands-on SPIFFE/SPIRE engineering experience required.
• Kubernetes experience in production environments.
• Experience with workload and node attestors customization.

Responsibilities

• Deploy and manage SPIRE Server and SPIRE Agent.
• Design SPIFFE IDs and trust domains.
• Implement SVID issuance and rotation.
• Integrate SPIRE with Kubernetes and service meshes.
• Collaborate with security and engineering teams.

Skills

SPIFFE/SPIRE

Kubernetes

Workload identity

Zero-trust concepts

Job description

Title: Security Engineer – Kubernetes, SPIFFE/SPIRE

Location: Brooklyn Park, MN | Hybrid – 2 days onsite per week

Job Type: Contract (12 months)

Compensation: $75 to $97 per hour (W2)

Required Skills:

• SPIFFE/SPIRE
• Experience building or customizing workload and node attestors

About the Role

We are seeking a Security Engineer with deep SPIFFE/SPIRE and Kubernetes experience to support workload identity and attestation in a large enterprise environment. This role focuses on implementing secure identity frameworks and workload authentication across distributed systems. You will work on cutting‑edge technologies to ensure secure communication between services in a dynamic, large‑scale environment.

Responsibilities include:

• Deploy and manage SPIRE Server and SPIRE Agent
• Design and implement SPIFFE IDs, trust domains, and workload identity patterns
• Build or customize workload and node attestors
• Implement/scalability of SVID (X.509/JWT) issuance and rotation
• Integrate SPIRE with: Kubernetes Service meshes (Istio, Linkerd), Envoy‑based workloads
• Partner with platform, security, and engineering teams to advance identity‑based security across the environment

Must‑Have Skills

• Hands‑on SPIFFE/SPIRE engineering (not just conceptual knowledge)
• Kubernetes experience in production environments
• Experience building/customizing workload + node attestors
• Strong understanding of workload identity, trust domains, and zero‑trust concepts

Dahl Consulting is proud to offer a comprehensive benefits package to eligible employees that will allow you to choose the best coverage to meet your family’s needs. For details, please review the DAHL Benefits Summary: https://www.dahlconsulting.com/benefits-w2fta/.

Equal Opportunity Statement

As an equal opportunity employer, Dahl Consulting welcomes candidates of all backgrounds and experiences to apply. If this position sounds like the right opportunity for you, we encourage you to take the next step and connect with us. We look forward to meeting you!