Kubernetes Security / DevSecOps Engineer

About the Role

We're looking for a hands-on engineer to build the security and monitoring for our Kubernetes platform, including the PostgreSQL databases that run on it in containers. This is a builder role, not a user role. You'll write the code that secures and monitors the platform, automate everything, and take part in on-call support for production systems.

What You'll Do

• Build and secure the Kubernetes platform using infrastructure as code.
• Run containerized PostgreSQL clusters, including replication, failover and backups.
• Build the metrics pipeline (postgres_exporter, Telegraf, InfluxDB) along with Grafana dashboards and alerts.
• Write Ansible playbooks and roles that configure servers consistently.
• Define infrastructure in Terraform and deliver changes through reviewed CI/CD pipelines.
• Develop Python tools and services that automate operations and security.
• Deploy and configure open-source security tooling, and keep insecure changes from reaching production.
• Take part in on-call rotation and incident response, including root-cause analysis and follow-up fixes.

Must-Have Skills

• Hands-on experience running PostgreSQL in Docker or Kubernetes, using StatefulSets, streaming replication and failover tooling such as Patroni or CloudNativePG.
• InfluxDB, including Telegraf and Flux or InfluxQL. Strong Prometheus experience will also be considered.
• Grafana, with dashboards and alerting you built yourself.
• Ansible, including playbooks, roles and Ansible Vault.
• Terraform and CI/CD, such as GitHub Actions.
• Strong Python coding skills, meaning you have built real tools and not just edited config files.

Nice to Have

Patroni, CloudNativePG, Falco, Trivy, Open Policy Agent (OPA), Wazuh, Teleport, OpenCTI, Anchore, GitHub Actions, PagerDuty.

You're a Great Fit If You

• Have carried a pager for production databases or clusters.
• Have built and configured security and monitoring tools yourself rather than only using vendor consoles or managed services.
• Can point to Python code you've written recently, ideally on GitHub.