Overview
Design, build and secure the container foundations and platform components that power Cisco's cloud services across Kubernetes and OpenStack environments.
What you'll do
- Design, maintain, and optimize secure container base images and platform components across Kubernetes and OpenStack environments.
- Lead container vulnerability management: identify CVEs, evaluate severity, execute patch workflows, and verify security fixes.
- Build automated pipelines using Python, Docker, and CI/CD tools to continuously scan, validate, and test container images across their build and release lifecycles.
- Debug container runtime, Linux networking, storage, and orchestration challenges across distributed multi-tenant environments.
- Leverage AI coding assistants (GitHub Copilot, OpenAI Codex) to accelerate code generation, automate repetitive scripts, and build reusable platform tools.
- Partner with engineering, QA, and security teams to embed secure-by-default standards and maintain clear documentation for release readiness.
What you'll need
- 8+ years of experience in Platform Engineering, DevSecOps, Cloud Infrastructure, or Software Engineering.
- Bachelor's/Master's degree or equivalent practical experience welcomed.
- Proven experience building, packaging, and operating containerized services using Docker/Podman and Kubernetes in production.
- Hands-on experience with container image scanning, CVE triage, patch validation, and image lifecycle management.
- Strong programming capability in Python to develop maintainable automation, custom scripts, and test suites.
- Solid Linux troubleshooting skills across container runtimes, networking, storage, and resource management.
- Experience embedding container builds, security scans, and automated checks into modern CI/CD release pipelines.
- Daily comfort using AI coding tools (e.g., GitHub Copilot, OpenAI Codex) to accelerate development and debugging.
Nice to have
- Experience with OpenStack infrastructure and its containerized services.
- Familiarity with container vulnerability scanners (e.g., Trivy, Grype, Clair).
- Exposure to software supply-chain security (SBOM generation, Cosign/Sigstore image signing, and provenance).
- Infrastructure as Code experience using Helm, Terraform, or Ansible.
- Relevant industry certifications (CKA/CKAD, Red Hat, Linux Foundation, or Cloud Security).
Read the full description and apply on the company’s own careers page.