Security Engineer

Incedo is a US-based consulting data science and technology services firm with over 3000 people helping clients
from our six offices across US Mexico and India. We help our clients achieve competitive advantage through
end-to-end digital transformation. Our uniqueness lies in bringing together strong engineering data science and
design capabilities coupled with deep domain understanding. We combine services and products to maximize
business impact for our clients in telecom Banking Wealth Management product engineering and life science
& healthcare industries.
Working at Incedo will provide you an opportunity to work with industry leading client organizations deep
technology and domain experts and global teams. Incedo University our learning platform provides ample
learning opportunities starting with a structured onboarding program and carrying throughout various stages of
your career. A variety of fun activities is also an integral part of our friendly work environment. Our flexible
career paths allow you to grow into a program manager a technical architect or a domain expert based on your
skills and interests.
Our Mission is to enable our clients to maximize business impact from technology by

• Harnessing the transformational impact of emerging technologies
• Bridging the gap between business and technology

Senior On-Prem Platform and Security Engineer
How do we implement test and maintain the security parts of that design in the application Kubernetes Linux pipelines and appliance

Strong software development experience preferably with Java or Go including designing and building production microservices REST APIs background services and command-line or automation tools.

Practical understanding of complete application flows including frontend-to-backend communication service-to-service calls authentication authorization database access messaging error handling and external integrations.

Ability to develop and integrate new microservices into the On-Prem platform including API design data models configuration logging health checks tests container images Helm charts and Kubernetes deployment.

Experience with databases and messaging technologies including schema design data migration transactions backup and restoration version compatibility Kafka or similar messaging platforms and failure recovery.

Strong hands-on experience with Kubernetes Helm containers Linux CI/CD ingress networking persistent storage monitoring logging resource configuration and troubleshooting deployed applications.

Strong practical knowledge of application and platform security including public/private keys TLS certificates trust chains mutual TLS authentication authorization encryption signing secure coding and common application vulnerabilities.

Practical experience with Kubernetes Secrets Sealed Secrets Vault or comparable technologies including implementing and troubleshooting the complete flow from credential creation and storage to application use rotation backup and recovery.

Ability to implement security and platform improvements directly in application code scripts Kubernetes manifests Helm charts Linux configuration and CI/CD pipelines without depending entirely on separate application or DevOps teams.

Experience with on-premises air-gapped edge appliance-based or restricted environments including offline dependencies configuration management secure package delivery upgrades diagnostics and operation with limited customer access.

Strong communication and cross-team collaboration skills with the ability to lead security-related work while also contributing to general application development microservice integration defect resolution technical investigations and platform enhancements.

The security engineer would:

Implement or enhance credential generation.
Configure how credentials are placed into Kubernetes.
Update application code Helm charts manifests or scripts where required.
Prevent credentials from appearing in logs and support bundles.
Implement rotation and certificate validation.
Add security checks and test the complete flow.

Senior On-Prem Platform and Security Engineer
How do we implement test and maintain the security parts of that design in the application Kubernetes Linux pipelines and appliance

Strong software development experience preferably with Java or Go including designing and building production microservices REST APIs background services and command-line or automation tools.

Practical understanding of complete application flows including frontend-to-backend communication service-to-service calls authentication authorization database access messaging error handling and external integrations.

Ability to develop and integrate new microservices into the On-Prem platform including API design data models configuration logging health checks tests container images Helm charts and Kubernetes deployment.

Experience with databases and messaging technologies including schema design data migration transactions backup and restoration version compatibility Kafka or similar messaging platforms and failure recovery.

Strong hands-on experience with Kubernetes Helm containers Linux CI/CD ingress networking persistent storage monitoring logging resource configuration and troubleshooting deployed applications.

Strong practical knowledge of application and platform security including public/private keys TLS certificates trust chains mutual TLS authentication authorization encryption signing secure coding and common application vulnerabilities.

Practical experience with Kubernetes Secrets Sealed Secrets Vault or comparable technologies including implementing and troubleshooting the complete flow from credential creation and storage to application use rotation backup and recovery.

Ability to implement security and platform improvements directly in application code scripts Kubernetes manifests Helm charts Linux configuration and CI/CD pipelines without depending entirely on separate application or DevOps teams.

Experience with on-premises air-gapped edge appliance-based or restricted environments including offline dependencies configuration management secure package delivery upgrades diagnostics and operation with limited customer access.

Strong communication and cross-team collaboration skills with the ability to lead security-related work while also contributing to general application development microservice integration defect resolution technical investigations and platform enhancements.

The security engineer would:

Implement or enhance credential generation.
Configure how credentials are placed into Kubernetes.
Update application code Helm charts manifests or scripts where required.
Prevent credentials from appearing in logs and support bundles.
Implement rotation and certificate validation.
Add security checks and test the complete flow.

We value diversity at Incedo. We do not discriminate based on race religion color national origin gender sexual orientation age marital status veteran status or disability status.