Staff, Platform Security Architect (Cloud, Infra and Platforms Security Architecture)
Core
Design and strengthen security architecture for a Kubernetes-based platform, including service mesh authentication/authorization, container security, and automated policy enforcement.
Role type
Staff, Platform Security Architect (Cloud, Infra and Platforms Security Architecture)
Builds
Kubernetes platform, Service Mesh, cloud-native workloads, and automated security controls
Domain
Cloud Native Security, Kubernetes, Service Mesh
Required skills
Kubernetes security architecture, Service Mesh (Istio/Envoy) security, Container security (rootless/non-root), API security context propagation, Security automation (AI/LLM), Zero Trust design, Policy-as-Code (Kyverno/OPA), Network segmentation, Code-level security review
Preferred skills
eBPF-based CNI, Kubernetes NetworkPolicy, Pod Security Admission, DevSecOps leadership, Large-scale distributed system security
Technologies
Kubernetes, Istio, Envoy, eBPF, Kyverno, OPA, Gatekeeper, AI/LLM
Responsibilities
Design and strengthen security architecture across the entire Kubernetes-based platform; Build and operate authentication, authorization, and encryption frameworks within the Service Mesh environment; Establish security control systems for protecting East-West and North-South traffic; Develop and implement security strategies for the Microservices Architecture environment; Enhance the security posture of container and cloud-native workloads; Build detection and response systems to protect the platform from machine-speed attacks; Drive Secure-by-Design culture adoption through collaboration with development teams.
Seniority
Staff, hands-on IC with strategic direction