US_East | Platform Engineering - Linux/Unix Admin_L3

Possible Month CTH | No Fees | Do Not Re-Post| Confidential

TMR ID: STPH
Role: Ks SecurityEngineer
Work location: Portland, Oregon
Background and Meet and Greet: MANDATORY

Job Description:
Ks Security & Isolation Specialist
Context:
The Security Engineer will focus on hardening and isolating Ks clusters to minimize blast radius in the event of compromise. This includes enforcing Linux security modules (SELinux, AppArmor), leveraging TPM for secure boot and attestation, implementing least privilege across nodes and workloads, and ensuring multi-tenant isolation within hybrid Kubernetes environments (x, ARM, accelerators).



Key Responsibilities:
Security Architecture & Policy Enforcement
· Design and implement security-first cluster configurations for Ks nodes.
· Enforce mandatory access control (MAC) using SELinux and AppArmor profiles for pods and system services.
· Integrate TPM-based at...