Senior Kubernetes Engineer DevSecOps

Senior Kubernetes Engineer – DevSecOps | Full-Time

We are looking for an experienced Senior Kubernetes Engineer – DevSecOps to join our team and take ownership of secure, scalable, GitOps-driven Kubernetes infrastructure across multi-cloud environments.

This role sits at the intersection of Platform Engineering, Cloud Infrastructure, Kubernetes and Security, with responsibility for building and hardening Kubernetes platforms, automating infrastructure through IaC, and embedding security controls directly into CI/CD pipelines.

Location: Chennai / Coimbatore, India – Remote Open

Employment Type: Full-Time

Experience: 6–10 Years

Kubernetes Experience: 3+ Years hands-on in production

What You'll Do

• Design, deploy and maintain Kubernetes clusters – GKE, AKS and EKS
• Own and evolve ArgoCD-based GitOps/CD pipelines across multiple clusters and environments
• Build and maintain Infrastructure as Code using Terraform / OpenTofu
• Develop GitHub Actions CI/CD pipelines, including security scanning gates
• Implement cloud security controls covering IAM/RBAC, network policies, secrets management and policy-as-code
• Drive container vulnerability management and CVE remediation
• Define Kubernetes security baselines using Pod Security Standards, admission controllers, OPA/Gatekeeper or Kyverno
• Troubleshoot production incidents across multi-cloud Kubernetes environments
• Work with security teams on threat modelling, SOC2/ISO27001 compliance and audit readiness
• Mentor junior engineers on GitOps and security best practices

Must-Have Skills

Kubernetes | ArgoCD / Flux | GitOps | Terraform / OpenTofu | GitHub Actions | DevSecOps | Cloud Security | GKE / AKS / EKS | Container Security | IAM/RBAC | Helm / Kustomize

Candidates should have:

• Production experience with ArgoCD or Flux, including multi-cluster/multi-tenant environments
• Strong Terraform/OpenTofu experience covering module design, state management and multi-cloud provisioning
• Hands-on GitHub Actions experience with reusable workflows, self-hosted runners and security gates
• Strong knowledge of IAM, network security, secrets management and policy-as-code
• Production experience with at least two of GKE / AKS / EKS
• Container image scanning and CVE triage/remediation experience
• Strong Kubernetes fundamentals covering RBAC, CNI, CSI, workload scheduling, Helm and Kustomize

Good to Have

Experience with OPA/Gatekeeper, Kyverno, Istio/Linkerd, Prometheus, Grafana, Falco, Wiz, Prisma Cloud, Aqua, Defender for Cloud, along with Python/Go/Bash scripting and exposure to CIS Benchmarks, NIST or SOC2.

CKA/CKS, Terraform Associate or Cloud Security certifications are advantageous but not mandatory.

Who We're Looking For

• We're particularly interested in engineers who have owned production Kubernetes environments, not just supported them. You should be comfortable working across Kubernetes + GitOps + IaC + Multi-Cloud + Security, with demonstrated ownership of GitOps-driven multi-cloud environments. Previous experience in a security-focused or DevSecOps role is preferred.