10/21/2026 updated
100 % available
Cloud Kubernetes Architect & DevSecOps Specialist (Azure / AKS)
Seville, Spain
Only remote
Bachelor's Degree in Telecommunications Engineering (Telematics)FinOpsKubernetes SecurityCloud EngineeringAzure Security CenterKubernetesAzure AKSDevSecOpsAWS EKS
Kubernetes & AKS Architecture
Design and implementation of production-grade Kubernetes environments on Azure (AKS), including Azure CNI Overlay networking with Cilium, private API servers, Gateway API ingress, namespace segmentation, Network Policies, and GitOps workflows with per-cluster ArgoCD.
IAM & Cloud Security
Management of identity and access with Keycloak, Microsoft Entra ID, OAuth 2.0, OIDC, RBAC, and secret management. Identification and remediation of OAuth 2.0/OIDC vulnerabilities and strengthening of access token security.
CI/CD & DevSecOps
Automation of CI/CD pipelines using GitLab and ArgoCD, deployment of Kubernetes components and operators for SaaS development teams, and observability setup with Prometheus and Grafana.
Multi-Cloud Infrastructure
Experience with multi-cloud environments including Azure and AWS, using tools such as Helm, Terraform, Docker, and Azure App Service, with a focus on high availability and cost optimization through FinOps criteria.
AI Agents & Cloud Orchestration
Security review and cloud migration of multi-agent AI systems using Claude Code, including credential and secret handling, least privilege permissions, orchestration on Claude Cowork with Google Drive, and cost and performance optimization.
Networking & Fortinet Solutions
Design, documentation, and deployment of high-availability networks using Fortinet solutions (FortiGate, FortiSwitch, FortiAP), as well as knowledge of LAN, VLAN, VPN, BGP, and WAF/Firewalls.
Scripting & Automation
Automation and scripting using Bash and Python, supporting DevSecOps workflows, self-service portals, and operational task automation in Kubernetes environments.
Observability & Monitoring
Setup and management of observability and alerting stacks with Prometheus, Grafana, and Lens, enabling real-time monitoring of Kubernetes clusters and cloud infrastructure.
Design and implementation of production-grade Kubernetes environments on Azure (AKS), including Azure CNI Overlay networking with Cilium, private API servers, Gateway API ingress, namespace segmentation, Network Policies, and GitOps workflows with per-cluster ArgoCD.
IAM & Cloud Security
Management of identity and access with Keycloak, Microsoft Entra ID, OAuth 2.0, OIDC, RBAC, and secret management. Identification and remediation of OAuth 2.0/OIDC vulnerabilities and strengthening of access token security.
CI/CD & DevSecOps
Automation of CI/CD pipelines using GitLab and ArgoCD, deployment of Kubernetes components and operators for SaaS development teams, and observability setup with Prometheus and Grafana.
Multi-Cloud Infrastructure
Experience with multi-cloud environments including Azure and AWS, using tools such as Helm, Terraform, Docker, and Azure App Service, with a focus on high availability and cost optimization through FinOps criteria.
AI Agents & Cloud Orchestration
Security review and cloud migration of multi-agent AI systems using Claude Code, including credential and secret handling, least privilege permissions, orchestration on Claude Cowork with Google Drive, and cost and performance optimization.
Networking & Fortinet Solutions
Design, documentation, and deployment of high-availability networks using Fortinet solutions (FortiGate, FortiSwitch, FortiAP), as well as knowledge of LAN, VLAN, VPN, BGP, and WAF/Firewalls.
Scripting & Automation
Automation and scripting using Bash and Python, supporting DevSecOps workflows, self-service portals, and operational task automation in Kubernetes environments.
Observability & Monitoring
Setup and management of observability and alerting stacks with Prometheus, Grafana, and Lens, enabling real-time monitoring of Kubernetes clusters and cloud infrastructure.
Experience
Professional experience0 - 5 years
Freelancer since2026
Languages
EnglishFluentSpanishNative speaker
Project history
Analysis and improvement of a production Kubernetes environment at an energy company, identifying security and network exposure gaps. Designed the company's new AKS architecture with Azure CNI Overlay networking, Cilium, Gateway API, namespace segmentation, Network Policies, and GitOps with per-cluster ArgoCD. Applied FinOps criteria including node pool and VM family sizing and spot nodes. Built proof of concept environments, deployed applications on Azure App Service integrated with Azure AI Foundry, and trained teammates in Kubernetes and AKS.
Security review of a Claude Code multi-agent system covering credential and secret handling, per-agent permissions under the least privilege principle, and data exposure between agents. Migrated the system from local execution to the cloud using Claude Cowork with Google Drive and a VPS for scheduled tasks. Optimized costs and performance by matching tasks to the right model and trimming instruction context.
Designed and implemented a self-service portal on AKS for 20-30 users automating temporary cluster access, saving 30 hours of operational work per day. Managed CI/CD pipelines with GitLab and ArgoCD, deployed Kubernetes components and operators for SaaS teams, managed IAM with Keycloak and Microsoft Entra ID (SSO, RBAC), identified and remediated OAuth 2.0/OIDC vulnerabilities, resolved a RabbitMQ production outage, migrated 150 NGINX Ingress resources to Gateway API, and set up observability with Prometheus and Grafana.