Security Engineer (50504)

Senior On-Prem Platform and Security Engineer How do we implement, test, and maintain the security parts of that design in the application, Kubernetes, Linux, pipelines, and appliance

Strong software development experience, preferably with Java or Go, including designing and building production microservices, REST APIs, background services, and command-line or automation tools.

Practical understanding of complete application flows, including frontend-to-backend communication, service-to-service calls, authentication, authorization, database access, messaging, error handling, and external integrations.

Ability to develop and integrate new microservices into the On-Prem platform, including API design, data models, configuration, logging, health checks, tests, container images, Helm charts, and Kubernetes deployment.

Experience with databases and messaging technologies, including schema design, data migration, transactions, backup and restoration, version compatibility, Kafka or similar messaging platforms, and failure recovery.

Strong hands-on experience with Kubernetes, Helm, containers, Linux, CI/CD, ingress, networking, persistent storage, monitoring, logging, resource configuration, and troubleshooting deployed applications.

Strong practical knowledge of application and platform security, including public/private keys, TLS, certificates, trust chains, mutual TLS, authentication, authorization, encryption, signing, secure coding, and common application vulnerabilities.

Practical experience with Kubernetes Secrets, Sealed Secrets, Vault, or comparable technologies, including implementing and troubleshooting the complete flow from credential creation and storage to application use, rotation, backup, and recovery.

Ability to implement security and platform improvements directly in application code, scripts, Kubernetes manifests, Helm charts, Linux configuration, and CI/CD pipelines without depending entirely on separate application or DevOps teams.

Experience with on-premises, air-gapped, edge, appliance-based, or restricted environments, including offline dependencies, configuration management, secure package delivery, upgrades, diagnostics, and operation with limited customer access.

Strong communication and cross-team collaboration skills, with the ability to lead security-related work while also contributing to general application development, microservice integration, defect resolution, technical investigations, and platform enhancements.

The security engineer would:

Implement or enhance credential generation. Configure how credentials are placed into Kubernetes. Update application code, Helm charts, manifests, or scripts where required. Prevent credentials from appearing in logs and support bundles. Implement rotation and certificate validation. Add security checks and test the complete flow.

We value diversity at Incedo. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.