OpenShift Security

Project overview

For a banking sector player

Context and mission details

Overall objective:

Support container security, OpenShift; vulnerability analysis and management

Strong project constraint:

Heterogeneous environment, On premise and Public Cloud

Technical skills:

Language skills:

Detailed description:

As part of strengthening the security of our cloud-native infrastructures, we are looking for an OpenShift and Container Security Expert (M/F) with solid operational experience.

Integrated into the Security teams, you will be the technical referent for the entire value chain: from securing the overall architecture to container runtime, including fine network segmentation within the clusters.

Main missions:

Deploy and apply the least privilege model via RBAC and Security Context Constraints (SCC).

Harden the configuration of nodes, IPI/UPI, and Control Plane components (etcd, API Server).

Implement and manage secret rotation, certificate management, and integration with a secret manager.

Ensure compliance and monitoring of the CIS Red Hat OpenShift benchmark.

Integrate and automate vulnerability analysis and image signing in CI/CD.

Define and enforce admission rules (Validating/Mutating Webhooks, OPA/Gatekeeper or Kyverno).

Monitor runtime security (anomaly detection, suspicious behavior).

Design and maintain the multi-tenant network segmentation strategy (isolation of namespaces, projects, environments).

Participate in the creation of NetworkPolicies.

Analyze OpenShift audit logs and integrate them into the company's SIEM.

Participate in the management of vulnerabilities (CVEs) affecting the platform or the containerization chain.

Write guides for secure development best practices and support application teams.

• Container Security
• Expert
• Mandatory
• Openshift and Kubernetes
• Application Security
• Experienced
• Important
• DevSecOps
• Professional English (Mandatory)
• Securing OpenShift clusters & Control Plane
• Container Security & DevSecOps Chain
• Architecture & Network Segmentation
• Security Maintenance (MCS) & Incident Response

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 85-85 EUR/h
• Languages: French