Skip to Content
AI/ML On-site

SDE3, Infrastructure Security Engineer (DevSecOps)

Job Overview

The CPU Infrastructure team runs everything outside the GPU fleet: Kubernetes across Azure, AWS, GCP and Indian sovereign clouds, the network between them, Cloudflare, identity, secrets, observability, cost and the delivery pipeline every product ships… You are an infrastructure engineer whose first instinct is security, and who builds rather than only operates.

Key points

  1. Define and enforce security baselines for Kubernetes, cloud accounts, container images and CI/CD across all clouds.

  2. Write the policy gates in the delivery pipeline (OPA / Conftest, Kyverno or equivalent): network exposure, IAM, image provenance, secrets, data residency.

  3. Own secrets and workload identity: Vault or cloud-native equivalents, rotation, short-lived and scoped credentials, no long-lived keys.

  4. Build detection and response: runtime security (Falco / Tetragon or equivalent), log-based detections, alerting and playbooks.

  5. Strong Kubernetes and Linux fundamentals; has run production clusters on at least one major cloud.

  6. Hands-on with Terraform / OpenTofu and GitOps (ArgoCD or Flux).

  7. Has built security automation, not only operated tools: policy-as-code, secrets rotation, CI/CD security gates or detection pipelines.

  8. Working knowledge of IAM, network security, TLS and secrets management across clouds.

Skills

KubernetesCI/CDPythonAWSAzureGoogle CloudTerraformLinux

Experience: 5–9 years · Job type: Full-time

Similar jobs

More open roles like this one