Description

Secure and validate a Kubernetes-based recording system in a regulated public sector environment by enforcing security governance, managing cluster hardening, and ensuring compliance with cybersecurity standards.

Responsibilities

• Design and implement security controls for Kubernetes clusters, including RBAC, network policies, and secrets management.
• Conduct vulnerability management, risk assessments, and incident response for containerized workloads.
• Evaluate vendor-supported architectures and validate system configurations against security best practices.
• Configure and maintain logging, monitoring, and alerting frameworks for operational visibility.
• Ensure alignment with NIST frameworks and public sector compliance requirements.

Required Skills

• 5+ years securing Kubernetes clusters in cloud or hybrid environments.
• Strong knowledge of container security, including image scanning, runtime protection, and secure deployment.
• Hands-on experience with Kubernetes architecture, defense-in-depth, and least privilege principles.
• Proficiency in implementing role-based access control (RBAC) and enforcing network policies.
• Experience with CI/CD security integration and DevSecOps practices.
• Understanding of secure configuration, hardening, and secrets management.
• Bachelor's degree in a related field or equivalent experience.

Preferred Skills

• Certifications such as CKS or CISSP.
• Familiarity with CIS Kubernetes Benchmark hardening.
• Experience supporting government systems or other regulated environments.

Key Skills

Education

Bachelor's degree