Kubernetes and Container Platform Security Specialist

Tehtävä

As Kubernetes and Container Platform Security Specialist you own the security of Verda's Kubernetes offering: multi-node and single-node clusters, the container registry, and the credentials that reach it. The workloads running on it are not ours, the tenants do not trust each other, and the boundary between them is what customers are paying for. That is a different problem from securing your own cluster, and it is the center of this role. This is a securing role rather than a platform engineering one. You would not run the clusters or carry the platform on-call rota. The platform team operates and implements, and you define the security standard and verify what ships against it. In this role, you would be the technical authority on Kubernetes and container platform security at Verda. Own the security design of Verda's Kubernetes offering, container registry, and registry credentials, including image provenance, signing, and admission verification requirements Own the tenant isolation model on shared Kubernetes infrastructure: namespace, node and cluster boundaries, tenant reachability, and kubelet and API server exposure Own the GPU-specific surface that most Kubernetes security work never touches: device plugins, privileged operator workloads, and partitioning boundaries Define the Kubernetes hardening baseline across control plane, node OS, container runtime, etcd and secrets handling, and the policy and admission enforcement model behind it, expressed as policy-as-code so conformance is continuously observable Design the Kubernetes network security model alongside Network Security: CNI-level policy, L3/L4/L7 controls, DNS and egress policy Specify runtime detection requirements for the Security Operations Center to operate and triage, scope assessments and attack simulation for red teams to execute, and act on what both surface Judge Kubernetes and container ecosystem advisories against Verda's configuration and set remediation priority, research new releases and ecosystem technology in a lab ahead of production adoption, and support Verda's compliance position through technical evidence and audit support