US_East | Platform Engineering - Linux / Unix Admin_L3

"Possible Month CTH | No Fees | Do Not Re-Post| Confidential

TMR ID : STPH

Role : Ks SecurityEngineer

Work location : Portland, Oregon

Background and Meet and Greet : MANDATORY

Job Description :

"Ks Security & Isolation Specialist

Context :

The Security Engineer will focus on hardening and isolating Ks clusters to minimize blast radius in the event of compromise. This includes enforcing Linux security modules (SELinux, AppArmor), leveraging TPM for secure boot and attestation, implementing least privilege across nodes and workloads, and ensuring multi-tenant isolation within hybrid Kubernetes environments (x, ARM, accelerators).

Key Responsibilities :

"Security Architecture & Policy Enforcement

• Design and implement security-first cluster configurations for Ks nodes.
• Enforce mandatory access control (MAC) using SELinux and AppArmor profiles for pods and system services.
• Integrate TPM-based attestation and secure boot for cluster nodes to ensure trust in hardware and OS integrity.
• Establish node, pod, and namespace isolation strategies to reduce lateral movement risk.
• Harden cluster components (API server, etcd, kubelet) following CIS and NSA Kubernetes security benchmarks.

Blast Radius Reduction

Integration with Identity & Secrets Management

Runtime & Supply Chain Security

Monitoring & Incident Response

What are the Mandatory skills and skill proficiencies required for this position?

What are the Optional skills and skill proficiencies for this position?

The following details must accompany your submission :

First Name, Middle name, and Last Name :

City and State :

Open to Relocate?

Rate : Availability :

Phone :

Mobile :

Email address :

Visa type :

Visa Expiration Date :

Hiring Status :

MiguelAngel Buonafina - ERM

North America

Tel. : +"