Kubernetes Security Analyst

S R International•Phoenix, AZ

1d•Hybrid

About The Position

Maricopa County is seeking a skilled Kubernetes Security Analyst to support the security, configuration, and ongoing protection of a Kubernetes-based, containerized infrastructure. This role focuses on ensuring secure architecture, enforcing security best practices, and maintaining a resilient and compliant environment.

Requirements

Strong knowledge of Kubernetes architecture and security principles
Experience with container security and hardening practices
Knowledge of RBAC, network security, and access control models
Understanding of logging, monitoring, and alerting frameworks
Experience with vulnerability management and risk mitigation
Hands-on experience securing containerized environments
3+ years of experience in Kubernetes security and containerized environments
Hands-on experience with: Image scanning & runtime protection
Secure deployment practices
RBAC implementation & network policies
Secrets management
Logging, monitoring, and alerting systems
Experience with risk assessments and incident response
Experience working in or supporting government environments

Nice To Haves

Experience with Kubernetes security tools (Falco, Prisma Cloud, Aqua, Sysdig)
Familiarity with CIS Kubernetes Benchmark
Experience in regulated environments (government, healthcare, etc.)
Certifications such as CKS, CISSP, or similar
Knowledge of DevSecOps and CI/CD security integration

Responsibilities

Secure and maintain Kubernetes clusters in cloud/hybrid environments
Evaluate system architecture and ensure secure configurations and compliance
Implement and manage RBAC (Role-Based Access Control) and network policies
Perform container security activities (image scanning, runtime protection, secure deployments)
Manage secrets, credentials, and key security practices
Configure and maintain logging, monitoring, and alerting systems
Conduct risk assessments, vulnerability management, and incident response support
Collaborate with internal teams and vendors to enforce security standards and best practices
Ensure alignment with cybersecurity frameworks and regulatory requirements