About HCLTech HCLTech is a global technology company, spread across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. We re powered by our people a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.
To learn more about how we can supercharge progress for you, visit
Your role and responsibilities
Develop and maintain Unified Device Identity Services, including APIs and plugins.
Provide tactical and operational support for edge security infrastructure (e.g., Web Application Firewalls, Rate Limiting Services).
Build and manage Hardware Attestation Services, supporting workload attestation and policy enforcement.
Implement identity issuance and attestation for workloads and agents using open-source tools like SPIFFE, SPIRE, and Keylime.
Enable secure application-level token verification through JWT signing.
Support IAM initiatives, including Auth IDP creation and PingFed decommissioning.
Integrate deployments into managed CI / CD pipelines and repositories.
Design and maintain scale, sanity, functional, and regression tests.
Develop observability dashboards, alerts, and incident response workflows.
Ensure compliance with patching guidelines for CVE and vulnerability management.
Skills and qualifications
Languages & Tools: Golang, Python, PKI, ArgoCD, Helm, Kubernetes, Istio, Envoy
Security & Identity: Zero Trust, SPIFFE, SPIRE, OIDC Flows
Additional Expertise: Istio Rate Limit Service, AI-related topics (MCP, RAG)
Strong knowledge of cloud-based services running in service meshes is expected.
Proven experience in cloud and on-prem security infrastructure.
Hands-on expertise with service mesh architectures.
Strong understanding of IAM, PKI, and attestation frameworks.
Ability to work in fast-paced environments and collaborate with SecOps teams.
Advanded English
Please, submit resumé in English.
Why choose us?
We are one of the largest and fastest growing technology companies in the world, with offices in over 60 countries and 224,000 employees.
Our company is extremely diverse with 165 nationalities represented.
We offer the opportunity to work with colleagues from all over the world.
We offer a virtual-first work environment, promoting a good integration between your work and personal life, with real flexibility.
We are committed to your growth, offering learning and career development opportunities at all levels to help you find your unique brilliance. We offer comprehensive benefits to all employees.
We are certified as a "Great Place to Work" and "Top Employer" in 17 countries, and recognized as a "Top Employer" in Brazil specifically, offering a positive work environment that values employee recognition and respect.
Equality & Opportunity for All
Representing 165 nationalities worldwide, we are proud to be an equal opportunity employer committed to providing equal employment opportunities to all applicants and employees without regard to race, religion, sex, color, age, national origin, pregnancy, sexual orientation, disability or genetic information, or any other protected classification, in accordance with federal, state and / or local laws.
#J-18808-Ljbffr