DevSecOps / Openshift

Project overview

#StormYourCareer Join STORM GROUP and grow with us!

Secure the Cloud Native platforms of a major client:

As part of the continuous strengthening of the security posture of our cloud-native infrastructures, we are looking for an OpenShift and Container Security Expert. Integrated into the heart of the Security teams and in close contact with the DevOps and Infrastructure teams, you will be the essential technical referent for the entire value chain: from hardening the cluster architecture to runtime protection of containers, including application security and security automation in CI/CD.

Your future environment

You will work within the Infrastructure and Cybersecurity Department, in a multi-project Agile organization. Interacting constantly with Cloud architects, DevSecOps engineers, and application teams, you will evolve in a dynamic and demanding environment (hybrid environment in Île-de-France). This is the ideal environment to work with cutting-edge containerization technologies (Red Hat OpenShift, Kubernetes), implement fine-grained isolation strategies (NetworkPolicies, OPA/Kyverno), and manage the Security Maintenance (MCS) of large-scale containerized ecosystems.

Your key missions

Securing OpenShift Clusters & Control Plane (HARDENING & CLUSTER SECURITY Mode):

DevSecOps, Application Security & Network Segmentation (DEVSECOPS & NETWORK ISOLATION Mode):

Security Maintenance & Incident Response (MCS & GOVERNANCE Mode):

• Deploy and apply the principle of least privilege via RBAC and Security Context Constraints (SCC).
• Harden the configuration of nodes, IPI/UPI, and critical Control Plane components (etcd, API Server).
• Implement and manage secret rotation, certificate management, and their integration with an enterprise secret manager.
• Ensure compliance and continuous monitoring of CIS Red Hat OpenShift benchmark rules.
• Integrate and automate vulnerability analysis (CVE) and container image signing within CI/CD pipelines.
• Define and enforce admission rules (Validating/Mutating Webhooks, OPA/Gatekeeper or Kyverno).
• Design and maintain the multi-tenant network segmentation strategy (fine-grained isolation of namespaces, projects, and environments via NetworkPolicies).
• Monitor runtime security (anomaly detection, suspicious behavior of pods and containers).
• Analyze OpenShift audit logs and ensure their smooth integration into the enterprise SIEM.
• Actively participate in the management of vulnerabilities (CVE) affecting the platform or the containerization chain.
• Write guides for secure development and architecture best practices (application security), and support the acculturation of application teams.

Requirements

Your assets

Our benefits

5 reasons to join us

Our selection process

Ready to join a team of committed experts? Don't hesitate, join the Storm Team!

Storm Group encourages an inclusive and multicultural culture where diversity of profiles fuels our collective intelligence. By joining the Storm Team, you become part of a committed ecosystem that places the development of your talents at the heart of its strategy, while actively contributing to solidarity and reducing environmental impact, both within our offices and in the large-scale projects we undertake for our clients.

Work environment

Storm Group is a consulting firm specializing in the transformation of Information Systems and Organizations. We support our clients across the entire IT value chain, from expert sourcing to strategic consulting and software engineering.

Our clientele primarily consists of major players in banking, insurance, and finance, for whom we mobilize rigorously selected consultants for their most strategic projects.

• Education: Engineering degree or Master's degree (Bac+5) in computer science, cybersecurity, or distributed/cloud-native systems administration.
• Experience: You have 4 to 8 years of confirmed experience in cybersecurity or DevOps/SecOps engineering, with validated expertise in OpenShift, Kubernetes, and container security.
• Imperative Technical Expertise:
• Container Security: Expert Level (Imperative).
• OpenShift and Kubernetes: Expert Level (Imperative).
• Application Security: Confirmed Level (Important).
• DevSecOps: Confirmed Level (Important).
• Proven experience with SIEM integration, secret management, and Control Plane hardening (SCC, RBAC, CIS Benchmarks).
• Operational Constraints & Languages:
• Professional English imperative (daily written and oral practice).
• Position based in Île-de-France.
• Expert Posture & Pedagogy: Ability to support and acculturate application and DevSecOps teams to secure development best practices.
• Analytical Mindset & Rigor: Constant focus on risk assessment and hardening configurations on complex production environments.
• Reactivity & Global Vision: Ability to quickly address new vulnerabilities (CVEs) while maintaining a coherent and resilient containerized architecture.
• Public transport pass reimbursement up to 75%.
• Meal vouchers subsidized by STORM GROUP at 50% (€10.5 / day).
• Gymlib / Wellpass access (sports and well-being).
• Health / Provident Fund insurance plan with Alan.
• Continuous training: Access to Udemy Business and support for Red Hat OpenShift / Kubernetes Security certifications (EX180/EX280, CKS
• Certified Kubernetes Security Specialist).
• Referral bonus, profit-sharing, and participation bonuses.
• Work rhythm: Partial remote work and on-site presence at the client's location (Île-de-France).
• Tailored career path: Co-create a unique professional trajectory adapted to your ambitions.
• Strategic missions: Work on large-scale projects, perfectly aligned with your expertise.
• Dedicated support: Benefit from structured annual reviews to ensure your continuous progress.
• Continuous excellence: Develop your skills daily within a demanding ecosystem.
• Sustainable performance: Thrive in an environment where business demands respect your work-life balance.
• Introductory call with a recruitment manager.
• Technical interview with in-depth technical assessment (Practical case on hardening an OpenShift cluster/SCC, OPA/Kyverno policy, managing a critical CVE in CI/CD, and NetworkPolicy isolation).
• Final meeting to validate fit and project outlook.

Project details

• Start: ASAP
• Duration: 1 mois
• Remote: hybrid
• Location: 75002, Paris, Île-de-France, FR
• Languages: French