SDE3, Infrastructure Security Engineer (DevSecOps)

About the role

The CPU Infrastructure team runs everything outside the GPU fleet: Kubernetes across Azure, AWS, GCP and Indian sovereign clouds, the network between them, Cloudflare, identity, secrets, observability, cost and the delivery pipeline every product ships through. The team builds and runs what it builds.

What you'll do

• Define and enforce security baselines for Kubernetes, cloud accounts, container images and CI/CD across all clouds
• Write the policy gates in the delivery pipeline (OPA / Conftest, Kyverno or equivalent): network exposure, IAM, image provenance, secrets, data residency
• Own secrets and workload identity: Vault or cloud-native equivalents, rotation, short-lived and scoped credentials, no long-lived keys
• Build detection and response: runtime security (Falco / Tetragon or equivalent), log-based detections, alerting and playbooks
• Run the finding-to-fix loop for security findings: triage, assign, fix, add a detection, retest

What you need

• Network security
• Linux
• IAM
• Python
• Kubernetes
• CI/CD

Good to have

• Incident response
• Terraform
• Go
• ISO 27001
• LLMs
• Data privacy