Platform Engineer - Kubernetes/OpenShift

# Platform Engineer - Kubernetes / OpenShift ## About the Role HCLTech is seeking a Platform Engineer to design, operate, and automate secure shared SaaS-style platform services using Kubernetes/OpenShift. The role focuses on interactive remote access, file transfer, tenant isolation, credential lifecycle automation, session recording, logging, metering, billing events, and automated platform lifecycle management. The engineer will work closely with security teams to maintain audited controls, refine detection scenarios, and monitor service-level indicators and objectives. Strong production experience with Kubernetes/OpenShift, Go, Python, Linux systems engineering, CI/CD, infrastructure as code, cloud-compatible object storage, IAM, and security principles is required. ## Key Responsibilities * Design and operate interactive access services based on Apache Guacamole, containerized on OpenShift, translating HTTPS to SSH, RDP, SQL, and VNC protocols. * Build and maintain file transfer services using S3 presigned URLs with time-bound expiry and tenant-scoped bucket and path access controls. * Engineer tenant isolation within shared SaaS-style deployments using predefined connections and network-level controls. * Design credential lifecycle automation, including credential retrieval/seeding at session start and reset/removal at session stop. * Integrate credential lifecycle processes with Privileged Access Management and credential stores. * Build session recording and logging pipelines that deliver audit data to tenant-specified repositories such as Kafka, S3, and Git. * Implement metering and billing event generation for per-tenant consumption tracking. * Develop CI/CD pipelines for automated platform provisioning, startup, shutdown, and decommissioning using immutable infrastructure principles. * Collaborate with security teams to refine detection scenarios each sprint. * Maintain audited control reporting aligned with Seven IT Risk Controls and the COBIT framework. * Define and monitor SLIs/SLOs including start latency, session success rate, recording completeness, tenant isolation violations, and credential reset compliance. ## Required Qualifications * 3+ years of hands-on production experience with Kubernetes/OpenShift, including deployment, networking, RBAC, persistent storage, and operators. * Proficiency in Go and Python for platform service development, automation, and tooling. * Strong Linux systems engineering skills, including SSH, networking, security hardening, and systemd. * Experience with container orchestration and CI/CD pipeline design using Helm, ArgoCD, Tekton, or equivalent technologies. * Experience with S3-compatible object storage such as MinIO or AWS S3, including presigned URLs, bucket policies, and IAM integration. * Experience with Azure DevOps for backlog management, CI/CD pipelines, and release workflows. * Experience with Infrastructure as Code using Terraform, Ansible, or equivalent tools. * Understanding of security principles including zero trust, defense in depth, protocol insulation, MFA, and credential management. * Experience with IAM systems, directory services integration, and conditional access policies. * Familiarity with logging and monitoring technologies such as Kafka, Elasticsearch, and Prometheus/Grafana. * Eligibility to work in the Netherlands. * Fluency in Dutch and English. ## Preferred Qualifications * VMware Cloud Foundation (VCF) experience or familiarity with VCF-based infrastructure. * Experience with Privileged Access Management tools such as CyberArk or HashiCorp Vault. * Experience with Apache Guacamole or similar remote access gateway technologies. * RDP and Windows Server administration knowledge. * Experience in regulated financial services environments, including DORA, NIS2, or equivalent regulatory frameworks. * Understanding of network segmentation and firewall rule management. * SOC 2 Type 2 reporting or equivalent security assurance framework experience. * Experience designing metering and billing event pipelines for internal platform products. ## Skills & Competencies * Kubernetes and OpenShift * Go and Python * Linux systems engineering * Container orchestration * CI/CD * Helm, ArgoCD, Tekton, or equivalent * S3 / MinIO / AWS S3 * Azure DevOps * Terraform and Ansible * IAM and access management * Privileged Access Management * Network security and segmentation * Zero-trust security * Credential management * Apache Guacamole * Kafka, Elasticsearch, Prometheus, and Grafana * Infrastructure automation * Platform lifecycle management * Monitoring and observability * Tenant isolation * Session recording and audit logging ## Education & Experience **Education:** No specific educational requirement is stated in the source job description. **Experience:** 3+ years of hands-on production experience with Kubernetes/OpenShift is required, along with the technical experience specified above. ## Work Arrangement & Schedule * **Location:** Netherlands * **Work Arrangement:** Not explicitly specified in the source job description. * Candidates must be eligible to work in the Netherlands. * Fluency in Dutch and English is required. * The source does not specify working hours or employment type. ## Compensation & Benefits * Competitive compensation and benefits. * Up to 20 days of vacation per year. * Various insurance benefits, including Term Life and Business Travel insurance. * Statutory benefits applicable in the Netherlands. * Employee benefits are governed by HCLTech's internal policy and applicable local law. * Opportunities for professional development, upskilling, and involvement in projects. * Supportive, diverse, and global team environment. * Opportunities to participate in initiatives including CSR Council, Diversity Council, Women Connect, and Sparks – Engagement Champion. ## Compliance / Additional Information * HCLTech states that employee benefits are regulated by internal policy and applicable country law. * The role involves security, audit, access-control, and compliance responsibilities, including Seven IT Risk Controls and COBIT-related reporting. * Candidates should refer to HCLTech's Candidate Data Privacy Notice for information regarding personal data processing. * HCLTech is a global technology company operating across digital, engineering, cloud, and AI services.