DevSecOps Engineer with Kubernetes (f/m/x)

Join our engineering team to develop an APM operator for a Red Hat MicroShift–based platform. The operator will enable containerized applications to use mutual TLS (mTLS) for internet‑facing connectivity. You will work closely with the operating system and Kubernetes stack, designing an operator and an access layer for hardware security (TPM) to securely manage private keys.

By joining us, you become a member of the Embedded Competence Center at Sii, an internal organizational unit bringing together more than 500 specialists nationwide. We are currently working on about 100 projects for 50 clients from various industries, including automotive, IoT, telecommunications, and medical.

• At least 5 years of commercial experience as a DevOps / DevSecOps
• Strong Kubernetes knowledge, including networking on Kubernetes
• Hands‑on experience with Kubernetes Operators
• Good command of Go and/or Rust – at least one as primary language
• Solid Linux fundamentals and experience working closely with the OS
• Understanding of mTLS / certificate‑based authentication and secure communications
• Fluency in English – at least B2
• Residing in Poland required

Nice to have:

• Knowledge of TPM / hardware security concepts (helpful, not mandatory)
• Previous work with Red Hat MicroShift or other edge/embedded Kubernetes distributions
• Experience with PKI, certificate lifecycle automation, or service mesh concepts

• Design and implement a Kubernetes Operator for a Red Hat MicroShift–based platform
• Enable and automate mTLS for containerized applications (internet‑facing connectivity)
• Implement and integrate secure key handling (TPM access layer / hardware‑backed keys when applicable)
• Work on Kubernetes networking aspects (services, ingress/egress, policies, certificates)
• Build and maintain Linux‑level components and automation/scripts supporting the platform
• Collaborate with platform/security stakeholders, document decisions, and deliver production‑ready code

Residing in Poland required