TL;DR

Senior Kubernetes Security Engineer (Aerospace): Focus on hardening and isolating Kubernetes clusters to minimize blast radius in mission-critical aerospace environments with an accent on Linux security modules, TPM integration, and multi-tenant isolation. Focus on architecting secure configurations across diverse hardware platforms, enforcing least-privilege policies, and strengthening supply chain security.

Location: This is an onsite role in Portland, OR.

Salary: $108,000–$148,000

Company

%hirify_global% is a global business and technology transformation partner, helping organizations accelerate their dual transition to a digital and sustainable world.

What you will do

Architect and deploy security-first Kubernetes cluster configurations across diverse hardware platforms.
Enforce Linux security modules (SELinux, AppArmor) and sandboxing techniques to protect workloads and system services.
Integrate TPM for secure boot and attestation and support cryptographic operations with HSM/KMS.
Design multi-tenant isolation strategies and apply least-privilege policies using RBAC, PodSecurityStandards, and NetworkPolicies.
Harden Kubernetes components using CIS/NSA benchmarks and implement kernel-level protections.
Strengthen supply chain security through image signing, SBOM scanning, and CI/CD vulnerability management.

Requirements

Bachelor’s degree in Computer Science, Engineering, or a related technical field, with 8–10 years of experience in infrastructure, security, or systems engineering.
Deep expertise in Kubernetes internals, including cluster hardening, multi-tenant isolation, and security architecture.
Advanced proficiency in Linux security features such as SELinux, AppArmor, seccomp, and kernel-level protections.
Hands-on experience with TPM for secure boot, attestation, and integration with HSM/KMS for cryptographic operations and secrets management.
Strong understanding of Pod Security frameworks (PodSecurityStandards, OPA, Gatekeeper, Kyverno) and implementation of RBAC, NetworkPolicies, and workload isolation at scale.
Experience with runtime and supply chain security tools and frameworks, including Falco, Cilium Tetragon, cosign, Notary, SLSA, and NIST 800-190.

Culture & Benefits

Comprehensive, non-negotiable benefits package for all regular, full-time employees.
Paid time off including vacation (12-25 days), company holidays, personal days, and sick leave.
Medical, dental, and vision coverage.
Retirement savings plans (e.g., 401(k) in the U.S.).
Life and disability insurance and employee assistance programs.

Sr. Kubernetes Security Engineer (Cloud Security)