Senior Kubernetes/Platform Engineer (10hrs/week, long-term)

We are looking for an experienced Cloud Security & Kubernetes Engineer to build and maintain the security foundation of our private cloud platform. You will identify security gaps, implement practical solutions, and continuously improve the security, observability, and resilience of our Kubernetes-based infrastructure. REQUIRED SKILLS - Strong expertise in cloud-native security for private cloud environments (non-AWS) - Extensive hands-on experience with Kubernetes security and operations - Deep understanding of Kubernetes security best practices, including: - RBAC and access control - Network policies - Secrets management - Admission controllers - Container image security - CI/CD security - Supply chain security - Experience designing and implementing: - Infrastructure monitoring - Security monitoring - Alerting - Threat detection and incident response - Experience securing Linux-based infrastructure and containerized workloads - Familiarity with infrastructure-as-code and GitOps workflows - Good understanding of European data protection requirements (GDPR) and security best practices NICE TO HAVE - Experience with observability platforms such as Prometheus, Grafana, Loki, OpenTelemetry, Falco or similar technologies - Knowledge of service meshes (e.g. Istio or Linkerd) - Experience with MySQL high-availability clusters - Experience securing S3-compatible object storage Frontend development experience (Angular, TypeScript frameworks) to support security-related improvements across the full application stack. OUR ENVIRONMENT - Kubernetes cluster hosting the majority of our workloads - High-availability MySQL database cluster - S3-compatible object storage - CI/CD pipeline We value pragmatic engineers who can balance security with operational simplicity. Rather than delivering a generic security audit, we are looking for someone who can identify realistic improvements, explain trade-offs, and work alongside our team to implement the most valuable recommendations. Ideally, you enjoy working across both infrastructure and application layers and can contribute where necessary, including frontend-related security improvements.