Security Engineer – Kubernetes, SPIFFE/SPIRE
Listed on 2026-02-16
-
Manufacturing / Production
Systems Engineer
Title
:
Security Engineer – Kubernetes, SPIFFE/SPIRE
Location
:
Brooklyn Park, MN | Hybrid – 2 days onsite per week
Job Type
:
Contract (12 months)
Compensation
: $75 to $97 per hour (W2)
Required Skills:
- SPIFFE/SPIRE
- Experience building or customizing workload and node attestors
About the Role
We are seeking a Security Engineer with deep SPIFFE/SPIRE and Kubernetes experience to support workload identity and attestation in a large enterprise environment. This role focuses on implementing secure identity frameworks and workload authentication across distributed systems. You will work on cutting‑edge technologies to ensure secure communication between services in a dynamic, large‑scale environment.
Responsibilities include:
- Deploy and manage SPIRE Server and SPIRE Agent
- Design and implement SPIFFE IDs, trust domains, and workload identity patterns
- Build or customize workload and node attestors
- Implement/scalability of SVID (X.509/JWT) issuance and rotation
- Integrate SPIRE with:
Kubernetes Service meshes (Istio, Linkerd),
Envoy‑based workloads - Partner with platform, security, and engineering teams to advance identity‑based security across the environment
Must‑Have Skills
- Hands‑on SPIFFE/SPIRE engineering (not just conceptual knowledge)
- Kubernetes experience in production environments
- Experience building/customizing workload + node attestors
- Strong understanding of workload identity, trust domains, and zero‑trust concepts
Dahl Consulting is proud to offer a comprehensive benefits package to eligible employees that will allow you to choose the best coverage to meet your family’s needs. For details, please review the DAHL Benefits
Summary:
Equal Opportunity Statement
As an equal opportunity employer, Dahl Consulting welcomes candidates of all backgrounds and experiences to apply. If this position sounds like the right opportunity for you, we encourage you to take the next step and connect with us. We look forward to meeting you!
#J-18808-Ljbffr(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).