Kubernetes Platform Quality & Security Engineer

We are looking for an experienced Kubernetes (K8s) Platform Quality & Security Engineer to assess and quality-assure the operating environment, a product currently deployed in a development Kubernetes cluster.

The objective is to ensure that the environment is robust, secure, scalable, resilient, and aligned with Kubernetes best practices before it is transitioned to a production cluster. The consultant will perform a structured assessment of the existing environment, identify risks and technical gaps, provide practical recommendations, and support the team in addressing key deficiencies.

The resulting recommendations and operating principles are expected to serve as a reference model for operating the company's products on Kubernetes.

Key Responsibilities

Kubernetes Configuration Review

Assess the existing Kubernetes cluster and application configuration.Review namespace structure, resource requests/limits, RBAC, and access control.Analyze network policies and traffic flows between services.Review secrets, certificates, and credential management.Assess persistent storage configuration for both databases and file-based workloads.Identify configuration deviations and opportunities for standardization.

Operations, Reliability & Resilience

Review liveness, readiness, and startup probes.Assess autoscaling, resource allocation, and rolling update strategies.Review the backup and recovery strategy, including persistent storage and solutions such as Velero or equivalent technologies.Evaluate logging, monitoring, observability, and alerting.Assess operational processes for incident handling, recovery, and ongoing maintenance.Identify potential resilience and availability risks before production deployment.

Kubernetes Security

Review container image management and vulnerability scanning practices.Assess Pod Security Standards and security policies.Review RBAC and least-privilege access across the environment.Assess node hardening, patch management, and security configuration.Identify security risks and recommend practical remediation measures.

Architecture & Best-Practice Assessment

Review how services are structured within Kubernetes, including:DeploymentsServicesIngressConfiguration and secretsPersistent workloadsIdentify technical debt, temporary solutions, and quick fixes that may have accumulated over time.Compare the current setup against Kubernetes best practices and established platform standards.Where relevant, compare with other products, such as Helix, to identify opportunities for standardization, reuse, and improved operational consistency.

Deliverables

Current-state assessment covering configuration, security, operations, architecture, and resilience.Risk and gap analysis, with deviations prioritized according to severity and business/technical impact.Concrete and implementable recommendations for addressing identified deficiencies.Prioritized action plan, including recommended next steps and clear ownership/responsibility.Practical support to the team in addressing selected findings.Knowledge-transfer sessions and workshops to ensure internal teams can maintain and improve the quality level after completion.Final workshop/debriefing presenting findings, recommendations, priorities, and key lessons learned.

Required Competencies

Documented hands-on experience with Kubernetes in production environments.Strong knowledge of Kubernetes architecture, configuration, and operations.Good understanding of container security, including:RBAC and access controlNetwork policiesSecrets and certificate managementPod securityContainer image security and vulnerability scanningStrong knowledge of Kubernetes operations, including:Resource requests and limitsAutoscalingHealth checks and probesRolling updatesLogging and monitoringAlertingBackup and restorePersistent storageProven experience in reviewing, auditing, and improving existing production environments, rather than only designing greenfield solutions.Ability to identify technical debt, operational risks, security gaps, and deviations from best practices.Experience translating technical findings into clear, actionable recommendations.Strong communication skills with the ability to work effectively with both software developers and IT operations teams.Ability to conduct workshops and transfer knowledge to internal teams.Swedish or English, both spoken and written.