Business Area: ITSeniority Level: Mid-Senior level Job Description: At Cloudera, we empower people to transform complex data into clear and actionable insights. With as much data under management as the hyperscalers, we're the preferred data partner for the top companies in almost every industry. Powered by the relentless innovation of the open source community, Cloudera advances digital transformation for the world's largest enterprises. Job Description About the Team & Role We are building an enterprise-grade, Everything-as-Code (Ea C) Operating Platform that replaces manual IT operations with an automated, zero-trust software factory. As a Dev Sec Ops Platform Engineer, you will be a core builder of our security, networking, and platform control planes. Operating in an environment where all infrastructure, access policies, and network routing exist strictly as version-controlled text artifacts inside Git repositories, you will architect our multi-cloud Kubernetes foundations (AWS EKS / Azure AKS), enforce keyless workload identity, build zero-trust service mesh perimeters, and write active Policy-as-Code (OPA/Rego) pipelines. As a Dev Sec Ops Platform Engineer, you will: Two-Tier Ia C Platform Primitives: Design, provision, and maintain modular Terraform primitives and Git Ops patterns for multi-cloud Kubernetes clusters (EKS/AKS), software-defined networks, and pod identity layers. Service Mesh & Edge Control Planes: Operate Istio/Envoy service mesh topologies across multi-gateway perimeters (Public Ingress, B2 B Ingress, Egress). Active Policy-as-Code Gating: Author and maintain Open Policy Agent (OPA / Rego) policies to enforce pre-flight deployment checks, Commit-as-Code format verification, and dynamic Just-in-Time (JIT) time-bound access escalation gates. Out-of-Band Telemetry Exhaust: Configure Open Telemetry (OTel) collectors and Envoy sidecar proxies to emit uniform out-of-band JSON telemetry logs, stamping W3 C traceparent headers and system primary keys (UPID, USID, correlation_id, process_id)



across all network hops. Git Ops Scaffolding & Linter Governance: Manage localized pull-based continuous delivery engines (Argo CD) and construct automated structural linters to enforce the 10-Pillar Application Spoke Repository Standard across all engineering teams. We are excited if you have (Required Experience): Kubernetes & Container Security: 5+ years of deep experience operating production Kubernetes (Amazon EKS, Azure AKS) and container security frameworks. Education: Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field or equivalent experience. Service Mesh & API Gateways: Advanced hands-on experience configuring Istio / Envoy service meshes, m TLS, custom ingress/egress routing, and edge API gateways. Policy-as-Code (Rego/OPA): Practical expertise writing custom Open Policy Agent (OPA) rules in Rego for pipeline gating, admission controllers, or access governance. Infrastructure-as-Code & Git Ops: High proficiency with Terraform (modular structure design) and pull-based Git Ops delivery tools (Argo CD or Flux). Keyless Identity & Secrets Management: Hands-on experience with OIDC identity federation, Hashi Corp Vault, and short-lived secret workflows. Distributed Observability: Strong understanding of Open Telemetry (OTel) instrumentation, W3 C trace context propagation, and log aggregation pipelines. You may also have: Familiarity with CI/CD linter construction for regular expression validation (Commit-as-Code). Background working within Hub-and-Spoke repository models and developer portal integrations. What you can expect from us: Generous PTO Policy Support work life balance with Unplugged Days Versátil WFH Policy Mental & Physical Wellness programs Phone and Internet Reimbursement program Access to Continued Career Development Comprehensive Benefits and Competitive Packages Paid Volunteer Time Employee Resource Groups EEO/VEVRAA#LI-EO1#LI-HYBRIDSummary Location: Hungary-Remote; Poland-Remote; Spain-Other-Remote; Czech Republic > Remote; Spain-Barcelona-Remote; Spain-Madrid-Remote Type: Full time

📌 Devsecops Platform Engineer (España)
🏢 Cloudera
📍 España