K3S Security Engineer

K3s Security Engineer
📍 Portland, OR (Onsite)
*it is not a traditional cyber security engineer role*
Role:
Harden and isolate K3s/Kubernetes clusters to reduce blast radius using Linux kernel security, TPM-based trust, and least-privilege controls across hybrid environments (x86/ARM).
Must-Have Skills
K3s / Kubernetes security hardening
SELinux, AppArmor, seccomp, Linux capabilities
TPM, secure boot, node attestation
RBAC, PodSecurityStandards, NetworkPolicies
Cluster hardening (API server, etcd, kubelet – CIS/NSA)
Runtime security & forensics (Falco / Tetragon)
Nice to Have
Supply chain security (cosign, SBOM, SLSA)
gVisor / Kata, confidential computing (SGX/SEV)
Air-gapped K8s, Flatcar/Bottlerocket
Open-source / SIG-Security contributions