Thales

OpenSky DevSecOps Engineer

Thales
Aerospace & DefenseSingaporeOnsitePosted 4 weeks ago

About the role

AI summarised

Thales is seeking a highly skilled and motivated DevOps Engineer specializing in Kubernetes to join our team. You will be responsible for designing, implementing, and managing container orchestration (OpenSky) platforms for next-generation Air Traffic Management Systems. This role requires deep expertise in Kubernetes internals, automation, and observability to enable reliable and secure application delivery at scale within an agile squad setting.

Aerospace & DefenseOnsite

Key Responsibilities

  • Deploy, upgrade, and manage Kubernetes clusters across Azure cloud and on-prem environments, ensuring high availability and disaster recovery.
  • Define and manage Helm charts, Kustomize overlays, or GitOps pipelines (ArgoCD, FluxCD) to automate application deployments, scaling, and rollbacks.
  • Configure Kubernetes networking using CNI plugins (Cilium, Calico, Multus) and implement Ingress, Service Mesh (Istio, Linkerd), and API gateway solutions.
  • Apply security best practices including RBAC, Pod Security Standards, network policies, and secrets management (Vault, Sealed Secrets).
  • Implement monitoring, logging, and alerting using Prometheus, Grafana, Loki, and OpenTelemetry.
  • Conduct performance tuning and capacity planning for clusters and workloads, establishing SLOs, SLIs, and error budgets.
  • Provision Kubernetes clusters and underlying infrastructure using Terraform/OpenTofu or Pulumi, managing configuration drift with GitOps.
  • Partner with developers to design cloud-native applications aligned with Kubernetes best practices and promote a DevSecOps culture.

Requirements

  • 2+ years of proven hands-on experience with Kubernetes in a production environment.
  • Strong knowledge of containerization technologies (Docker, OCI images) and registries.
  • Experience with cloud providers (AWS, Azure, GCP) or hybrid Kubernetes environments.
  • Proficiency in Infrastructure as Code (IaC) tools including Terraform, Helm, and ArgoCD.
  • Solid understanding of Linux systems, networking concepts, and security principles.
  • Bachelor's degree in Computer Science or Information Technology or a recognized Engineering degree.