Expert Sécurité conteneurs/openshift/devsecops

Job summary

The role serves as a technical security lead for cloud-native infrastructure, securing OpenShift clusters and container workloads from architecture through runtime. Responsibilities include hardening cluster control planes, automating vulnerability scanning and image signing in CI/CD, enforcing admission and network-segmentation policies, monitoring audit logs, and supporting vulnerability remediation, audits, and secure-development guidance.

Qualifications

• Expert-level container security skills.
• Expert-level OpenShift and Kubernetes skills.
• Confirmed application security skills.
• Confirmed DevSecOps skills.
• Professional English proficiency.

Responsibilities

• Apply least-privilege access using RBAC and Security Context Constraints.
• Harden OpenShift nodes, IPI/UPI configurations, and control-plane components, including etcd and the API server.
• Manage secret rotation, certificates, and integration with a secrets manager.
• Track compliance with the CIS Red Hat OpenShift benchmark.
• Automate vulnerability scanning and image signing in CI/CD pipelines.
• Define and enforce admission policies using validating or mutating webhooks, OPA/Gatekeeper, or Kyverno.
• Monitor container runtime activity for anomalies and suspicious behavior.
• Design and maintain multi-tenant network segmentation and namespace, project, and environment isolation.
• Analyze OpenShift audit logs and integrate them with the SIEM.
• Support CVE management, security incidents, audits, and remediation of audit findings.
• Write secure-development guidance and support application teams.

Skills

Languages

Industry

Relocation