> Markdown version of [/jobs/ext/2967620-software-engineer-kubernetes](https://www.wearedevelopers.com/jobs/ext/2967620-software-engineer-kubernetes). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Engineer - Kubernetes - **Company:** AnaVation, LLC - **Location:** San Antonio, TX, United States - **Experience:** Expert - **Contract:** Contract - **Skills:** Kubernetes Security, Amazon Web Services, Microsoft Azure, Cloud Computing, Configuration Management, Cyber Security, Linux, Network Control, Network Planning and Design, Network Segmentation, Open Source Technology, OpenShift, Role-Based Access Control, Ansible, Zero Trust Network Access, Software Engineering, Software Factory, Software Vulnerability Management, Cloud Platform System, Istio, Kubernetes Helm Charts, Git Flow, Kubernetes, Information Technology, AWS Fargate, CIS Benchmarks, Terraform, Oracle Cloud Infrastructure, Devsecops, Docker - **Published:** September 17, 2026 - **Apply:** https://startup.jobs/software-engineer-kubernetes-anavation-10095882 ## About the Role * Clearance: U.S. Citizen; TS/SCI. * Education: Bachelor's degree in Computer Science, Cybersecurity, IT, or related field; software development background. * Certification: DoD 8140/8570 IAT Level II and Certified Kubernetes Administrator (CKA). * Location: Full-time on-site in San Antonio, TX. * Experience and Knowledge: * Senior level comprehensive knowledge across key tasks and high-impact assignments; plans and leads major technology assignments; functions as a technical expert across the team; may lead others. * Demonstrated knowledge: Kubernetes, Istio, GitOps, custom Kubernetes Operators, custom Helm charts, custom Admission Controllers, custom CRDs and Controllers. * Extensive Linux and networking; understands each component of the Kubernetes control plane. * Experience building automation and configuration management with Ansible and Terraform; Docker, Terraform, and Helm. * Security and compliance knowledge for Kubernetes; knowledge of Cloud (AWS, Azure, OCI). * Experience working with a product that has end-users; creating and maintaining implementation documentation. * Minimum years of experience - 4 years of relevant experience, * Clearance: Active TS/SCI. * Education: Advanced degree in a related technical field. * Certification: Certified Kubernetes Security Specialist (CKS), Red Hat OpenShift, or CCSP. * Experience and Knowledge: * Mastery of the DoD Enterprise DevSecOps Reference Design; Kubernetes and Istio expert. * Experience supporting software factory environments (Iron Bank, Big Bang) and hardened containers. * Experience supporting Continuous Authority to Operate (cATO). * Experience supporting IL4, IL5, or IL6 cloud environments. * Experience supporting COT, CPT, or Security Control Assessors. * Experience with Twistlock runtime defense, Anchore image scanning, container signing (e.g., cosign/sigstore), and micro-segmentation. Benefits ## Description Position Responsibilities: This position sets the technical standard for securing container orchestration platforms and hardened workloads while keeping control evidence continuously validated and audit-ready., * Design, build, and run Kubernetes/OpenShift clusters and manage providers (Amazon EKS/Fargate, Azure KS, Google KE) or self-managed clusters. * Design network connectivity and provisioning strategy, and assess/design RBAC to keep the cloud foundation strong and compliant. * Maintain, configure, and monitor containers using Infrastructure as Code (Terraform, Helm) across development, test, and live environments. * Implement and validate security controls, security-relevant changes (SRCs), and Security Impact Assessments (SIAs) supporting IATT, ATO, and cATO readiness. * Perform full-stack Kubernetes (K8s) risk assessments and apply STIGs, CIS Benchmarks, and Iron Bank hardened images. * Advance control inheritance and automation aligned with the Government's Cyber Assessment Roadmap. * Support container vulnerability management against CVEs and open-source threat reporting, coordinating remediation with Value Stream engineering. * Collaborate with ISSEs, ISSMs, DevSecOps engineers, COT, CPT, and Government stakeholders across Value Stream sprint cadences. * Create and maintain documentation for implementations and supporting Bodies of Evidence (BOE). * Support Zero Trust enforcement and cloud-native security best practices across mission environments. * Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)