Kubernetes Security / DevSecOps Engineer

MindSource is seeking a hands-on Kubernetes Security / DevSecOps Engineer to build and secure its Kubernetes platform and containerized PostgreSQL databases. The role focuses on infrastructure automation, monitoring, security tooling, CI/CD delivery, Python development, and production on-call support and incident response.

Responsibilities:

• Build and secure the Kubernetes platform using infrastructure as code
• Run containerized PostgreSQL clusters, including replication, failover and backups
• Build the metrics pipeline (postgres_exporter, Telegraf, InfluxDB) along with Grafana dashboards and alerts
• Write Ansible playbooks and roles that configure servers consistently
• Define infrastructure in Terraform and deliver changes through reviewed CI/CD pipelines
• Develop Python tools and services that automate operations and security
• Deploy and configure open-source security tooling, and keep insecure changes from reaching production
• Take part in on-call rotation and incident response, including root-cause analysis and follow-up fixes

Requirements:

• Hands-on experience running PostgreSQL in Docker or Kubernetes, using StatefulSets, streaming replication and failover tooling such as Patroni or CloudNativePG
• InfluxDB, including Telegraf and Flux or InfluxQL. Strong Prometheus experience will also be considered
• Grafana, with dashboards and alerting you built yourself
• Ansible, including playbooks, roles and Ansible Vault
• Terraform and CI/CD, such as GitHub Actions
• Strong Python coding skills, meaning you have built real tools and not just edited config files
• Have carried a pager for production databases or clusters
• Have built and configured security and monitoring tools yourself rather than only using vendor consoles or managed services
• Patroni, CloudNativePG, Falco, Trivy, Open Policy Agent (OPA), Wazuh, Teleport, OpenCTI, Anchore, GitHub Actions, PagerDuty
• Can point to Python code you've written recently, ideally on GitHub