Postgraduate Diploma in Edge Orchestration and Security
Online 800-hour Postgraduate Diploma in Edge Orchestration and Security. 8 modules covering IEC 62443-3-3, IEC 62443-4-2 and K3s. Dedicated tutor and enrolment open.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Describe edge computing architectures for industrial environments.
Deploy lightweight Kubernetes distributions on plant nodes.
Orchestrate fleets of clusters using GitOps practices.
Assess the suitability of the edge for deterministic and real-time workloads.
Harden nodes and clusters in line with IEC 62443 and CIS benchmarks.
Manage identities and access for users and suppliers.
Implement observability and recovery plans at the edge.
Who it's for
- Edge platform engineer who wants to specialise in Edge Orchestration and Security.
- OT cybersecurity architect who wants to specialise in Edge Orchestration and Security.
- Industrial DevSecOps engineer who wants to specialise in Edge Orchestration and Security.
- Industrial systems administrator who wants to specialise in Edge Orchestration and Security.
- IIoT consultant who wants to specialise in Edge Orchestration and Security.
- Plant infrastructure manager who wants to specialise in Edge Orchestration and Security.
- Engineering or science graduates seeking to enter discrete manufacturing.
What you'll work with
- IEC 62443-3-3
- IEC 62443-4-2
- IEC 62443-2-1
- NIST SP 800-190
- CIS Kubernetes Benchmark
- Directiva (UE) 2022/2555 NIS2
- ISO/IEC 27001
- NIST SP 800-82 Rev. 3
8 modules · 800 h
1.1Cloud, fog and edge continuum1.2Latency requirements and local autonomy1.3Edge nodes and industrial servers1.4Typical plant workloads1.5Reference architectures such as RAMI 4.01.6Resource and environmental constraints1.7IT and OT convergence at the edge1.8Ownership and operating models1.9Security risks specific to the edge1.10Case study: workload mapping for a plant
2.1Kubernetes components and the control plane2.2K3s, MicroK8s and KubeEdge distributions2.3Pods, deployments and services2.4ConfigMaps and Secrets2.5Persistent storage on small nodes2.6Single-node clusters and high availability2.7Affinity, taints and tolerations2.8Resource management and limits2.9Operation with intermittent connectivity2.10Lab: three-node K3s cluster for industrial use
3.1Centralised management of hundreds of clusters3.2GitOps with Argo CD and Flux3.3Templating with Helm and Kustomize3.4Progressive and canary deployments3.5Configuration management per plant3.6Automatic rollback on failure3.7Rancher and fleet management platforms3.8Node inventory and labelling3.9Maintenance windows in production3.10Workshop: GitOps deployment to a fleet of nodes
4.1PREEMPT_RT kernel and system latency4.2CPU isolation and core allocation4.3Virtual PLCs and containerised control4.4Priorities and schedulers in Linux4.5Latency measurement with cyclictest4.6Coexistence of critical and non-critical workloads4.7GPU and TPU accelerators at the edge4.8Virtualisation with real-time hypervisors4.9Limitations of orchestration for control4.10Practical: jitter measurement on a node with PREEMPT_RT
5.1Threat model for edge nodes5.2Secure boot, TPM and remote attestation5.3Device identity and PKI5.4Network policies with Calico or Cilium5.5Admission policies with OPA Gatekeeper5.6CIS benchmarks for Kubernetes5.7Encryption of secrets at rest5.8Software supply chain and SBOM5.9IEC 62443 zones and conduits at the edge5.10Lab: hardening a cluster to CIS standards
6.1Role-based access control in Kubernetes6.2Integration with corporate directories6.3Secure remote access for suppliers6.4Principle of least privilege6.5Certificate and credential rotation6.6Access auditing and logs6.7Segregation of duties between IT and OT6.8Multi-factor authentication on consoles6.9Service account management6.10Case study: RBAC model for external integrators
7.1Metrics, logs and traces at the edge7.2Prometheus, Loki and Grafana7.3Security anomaly detection with Falco7.4Incident management on remote nodes7.5Cluster backups with Velero7.6Disaster recovery in the plant7.7Controlled chaos testing7.8Service availability indicators7.9Capacity planning7.10Practical: detecting anomalous behaviour with Falco
8.1Plant requirements analysis8.2Hardware selection and distribution8.3Orchestration architecture design8.4Security model and zones8.5GitOps and update strategy8.6Observability and response plan8.7Resilience and security testing8.8Assessment against IEC 624438.9Report and presentation8.10Final review with the tutor
How you'll learn
A 100% online programme on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it easy to combine with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is K3s, Argo CD, Rancher, Falco, Prometheus, in free, academic or evaluation versions. Assignments are based on real GitOps deployment procedures to a fleet of plant nodes, auditing a cluster against the CIS Benchmark, and measuring latency in containerised control workloads. Assessment is continuous across each module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Describe edge computing architectures for industrial environments.
Deploy lightweight Kubernetes distributions on plant nodes.
Orchestrate fleets of clusters using GitOps practices.
Assess the suitability of the edge for deterministic and real-time workloads.
Harden nodes and clusters in line with IEC 62443 and CIS benchmarks.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient command of Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 hours in total, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You will work with K3s, Argo CD, Rancher, Falco, Prometheus. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM own diploma upon passing the continuous assessment and the integrative project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Postgraduate Diploma in Automated Picking and Vision-Guided Robotics
Online 800-hour Postgraduate Diploma in Automated Picking and Vision-Guided Robotics. 8 modules covering ISO 10218-2:2025, EMVA 1288 Release 4.0 and OpenCV. Assigned tutor and open enrolment.
Diploma in 24/7 Operations and Service KPIs
Online postgraduate diploma of 800 hours in 24/7 operations and service KPIs: 8 modules covering continuous operation of automated systems, service indicators, high-availability maintenance, monitoring and…
Diploma in Hygienic Design and CIP/SIP
Online postgraduate diploma of 800 hours in hygienic design and CIP/SIP: 8 modules covering hygienic design principles, materials and finishes, equipment design, CIP and SIP systems,…
More in Robotics, Automation & Control
All Robotics, Automation & Control programmes → · How to apply · Fees & financing · Scholarships