Overview

In this role, you will help build an enterprise-grade EaC Operating Platform that automates IT operations with a zero-trust security model. You will shape multi-cloud Kubernetes foundations, policy-driven gates, and telemetry pipelines to enable secure, scalable software delivery. You’ll work closely with security, networking, and platform teams to turn infrastructure and policies into codified, reproducible artifacts. This is a mission-driven opportunity to advance secure, automated cloud-native operations at scale.

Compensaciones / Ventajas

- Generous PTO Policy
- Unplugged Days
- Flexible WFH Policy
- Mental & Physical Wellness programs
- Phone and Internet Reimbursement
- Continued Career Development

Responsabilidades

- Design, provision, and maintain modular IaC primitives for multi-cloud Kubernetes clusters
- Operate Istio/Envoy service mesh topologies across multi-gateway perimeters
- Author and maintain Open Policy Agent (OPA/Rego) policies for deployment checks and access gates




- Configure OpenTelemetry collectors and Envoy proxies for uniform telemetry and tracing
- Manage ArgoCD-based GitOps delivery and enforce repository standards across teams

Requisitos principales

- 5+ years of production Kubernetes (EKS/AKS) experience
- Advanced experience with Istio/Envoy service meshes, mTLS, and edge gateways
- Proficiency with Terraform (modular design) and GitOps tools (ArgoCD or Flux)
- Hands-on with OIDC identity federation, HashiCorp Vault, and short-lived secret workflows
- Strong understanding of OpenTelemetry instrumentation, trace context, and log pipelines

- collaboration with cross-functional teams
- analytical problem-solving
- ability to communicate security-focused concepts clearly
- Kubernetes (EKS/AKS)
- Istio/Envoy service mesh
- Policy-as-Code with Rego/OPA

📌 DevSecOps Platform Engineer (Barcelona)
🏢 Cloudera
📍 Barcelona