Capgemini Engineering · 17 hours ago
Kubernetes Security Engineer
Bellevue, WA
Full-time
Onsite
Senior Level, Lead/Staff
$76K/yr - $188K/yr
8+ years expCapgemini Engineering is a leader in engineering services, seeking a Kubernetes Security Engineer to support the aerospace industry. In this role, you will focus on securing cloud-native infrastructure, hardening Kubernetes clusters, and ensuring the reliability and security of mission-critical environments.
ConsultingMechanical EngineeringInformation TechnologyInformation ServicesInnovation Management
Responsibilities
Architect and deploy security-first Kubernetes cluster configurations across diverse hardware platforms, including x86, ARM, and accelerators
Enforce Linux security modules (SELinux, AppArmor) and sandboxing techniques (seccomp, gVisor, Kata) to protect workloads and system services
Integrate TPM for secure boot and attestation, ensuring hardware and OS integrity, and support cryptographic operations with HSM/KMS systems
Design multi-tenant isolation strategies using namespaces, node pools, and hardware partitioning to prevent lateral movement and reduce blast radius
Apply least-privilege policies using RBAC, PodSecurityStandards, NetworkPolicies, and resource constraints to secure workload execution and mitigate denial-of-service risks
Harden Kubernetes components (API server, etcd, kubelet) using CIS and NSA benchmarks, and implement kernel-level protections like seccomp-bpf and IMA/EVM
Secure workload secrets using TPM-backed storage and tools like SealedSecrets, HashiCorp Vault, or SOPS for safe distribution and access control
Strengthen supply chain security through image signing (cosign, Notary), SBOM scanning, and CI/CD vulnerability management
Monitor runtime behavior with tools like Falco and Cilium Tetragon, and collaborate with SRE and Security teams to develop incident response runbooks and conduct breach simulation drills
Qualification
Required
Bachelor's degree in Computer Science, Engineering, or a related technical field, with 8–10 years of experience in infrastructure, security, or systems engineering
Deep expertise in Kubernetes internals, including cluster hardening, multi-tenant isolation, and security architecture
Advanced proficiency in Linux security features such as SELinux, AppArmor, seccomp, and kernel-level protections
Hands-on experience with TPM for secure boot, attestation, and integration with HSM/KMS for cryptographic operations and secrets management
Strong understanding of Pod Security frameworks (PodSecurityStandards, OPA, Gatekeeper, Kyverno) and implementation of RBAC, NetworkPolicies, and workload isolation at scale
Familiarity with container runtimes (containerd, CRI-O, gVisor, Kata) and their security implications in hybrid environments
Experience with runtime and supply chain security tools and frameworks, including Falco, Cilium Tetragon, cosign, Notary, SLSA, and NIST 800-190
Knowledge of confidential computing (TEE, SGX, SEV), air-gapped deployments, and hardened Linux distributions like Flatcar and Bottlerocket
Benefits
Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
Life and disability insurance
Employee assistance programs
Other benefits as provided by local policy and eligibility
Company
Capgemini Engineering
Capgemini Engineering is a global innovation and engineering consulting firm.
Founded in 1982Paris, Ile-de-France, FRA
10001+ employees
H1B Sponsorship
Capgemini Engineering has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2022 (1)
2021 (12)
2020 (24)
Funding
Current Stage
Public CompanyTotal Funding
$4M2019-06-24Acquired
2006-09-19Post Ipo Equity· $4M
1990-01-05IPO
Leadership Team
Joao Neiva
Automotive Mobility Experience Offer Leader
Pascal Brier
Group EVP Strategy, Technology & Inovation
Recent News
2025-11-23
Mexico Business
2025-11-19
Company data provided by crunchbase