Software Engineer III - DevSecOps - Kubernetes Security

Job summary

A Software Engineer III builds security tooling and automation for a cloud platform, providing continuous visibility into Kubernetes security and compliance. The role defines and enforces cluster guardrails, tracks vulnerabilities, and embeds policy-as-code into infrastructure and delivery pipelines, while supporting container supply chain security across AWS EKS and other cloud environments using tools such as Go, Terraform, Kyverno, OPA, Argo CD, and GitHub Actions.

Qualifications

• Formal training or certification in software engineering concepts and applied experience.
• Working knowledge of AWS, GCP, or Azure and core cloud security services.
• Production experience securing Kubernetes and container orchestration, including access control, secrets management, workload security, network policies, and hardening.
• Experience with a managed Kubernetes service such as EKS, GKE, or AKS.
• Exposure to infrastructure-as-code or policy-as-code tools such as Terraform, Sentinel, Kyverno, or OPA.
• Hands-on experience building automation or tooling with Go; Python experience is also valuable.
• Experience with GitOps and CI/CD tools such as Argo CD and GitHub Actions.
• Ability to critically evaluate AI-assisted development outputs and handle data securely.
• Preferred: CKS or equivalent demonstrable Kubernetes and cloud security knowledge.
• Preferred: Familiarity with Crossplane, SBOMs, dependency governance, multi-region cloud architectures, or UK FCA and PRA requirements.

Responsibilities

• Define and enforce Kubernetes security controls, including access controls, workload standards, and network policies.
• Build automation to detect, enrich, and report security findings and compliance posture.
• Implement security guardrails and policy-as-code controls.
• Assess and track vulnerabilities in Kubernetes clusters and workloads.
• Support container image scanning, trusted registries, and dependency analysis.
• Embed security guardrails in infrastructure-as-code and automated delivery pipelines.
• Use and validate enterprise-authorised AI coding tools through peer review, testing, and secure coding practices.

Skills

Certifications

Languages

Industry

Relocation