Jobtitel: 75% remote: Kubernetes Security Domain Architect (f/m/d)
Vertragsart: Interim / Project Consulting
Arbeitszeitmodel: Vollzeit
Zahlungsintervall: Stündlich
Lohnsatz: Verhandelbar
Ort: Berlin, 75% remote (3 weeks remote / 1 week Berlin)
Job veröffentlicht: 28-03-2025
Job-ID: 43869
Name: Dirk Gebhardt
Telefonnummer: +494087709284
E-Mail: dirk.gebhardt@nemensis.de

Stellenbeschreibung

For our client we are looking for a Kubernetes Security Domain Architect (f/m/d).

Start: 05.05.2025
Duration: 30.09.25 (long term engagement (2026))
Capacity: 100% if possible
Location: 75% Remote, 25% Berlin (1 week Berlin / 3 weeks remote in rotation), up to 50% onsite in peak times

Role:
Developing and Maintaining Secure Architecture:

- Objective: Ensuring robust protection of managed Kubernetes service against threats.
- Objective: Conducting regular evaluations of Kubernetes clusters and components.
- Objective: Safeguarding Kubernetes environments through proactive threat detection.
- Objective: Enhancing Kubernetes protection through strategic use of security tools.
- Objective: Fostering a culture of security awareness within the project organization.

Skills (must-have):
• Project experience of more than 5 years designing/architecting security solutions for a managed Kubernetes services. Please explicitly name the security concepts applied during the projects.
• Profound understanding of the general kubernetes architecture, architecture of containers and containerized applications, and underlying infrastructure
components like DNS,certificates, secrets and network/compute/storage
• Project experience of more than 2 years with threat modeling and risk assessments in the context of kubernetes Environments
• Project experience designing and validating architectures and solutions against security compliance standards like CIS, BSI, OWASP, NIST, KRITIS)
• fluent English in speech and writing (at least C1)

Skills (should-have):
- Relevant IT and Cloud Security Certifications in the context of Kubernetes
- Fluent in German or Ukrainian in speech and writing (At least B2)
- Project experience with designing and setting up CI/CD processes and automation for provisioning of infrastructure resources spanning accross network domains in a secure manner