Operational Security Engineer – Container & Openshift Security - N4

Project overview

Overall Objective:

Accompanying Container Security, OpenShift; analysis and vulnerability management

MISSIONS:

As part of strengthening the security of our cloud-native infrastructures, we are looking for an OpenShift and Container Security Expert (M/F) with solid operational experience.

Integrated into the Security teams, you will be the technical referent for the entire value chain: from securing the global architecture to the runtime of containers, including fine network segmentation within the clusters.

Main Missions:

Deploy and apply the principle of least privilege via RBAC and Security Context Constraints (SCC).

Harden the configuration of nodes, IPI/UPI, and Control Plane components (etcd, API Server).

Implement and manage secret rotation, certificate management, and integration with a secret manager.

Ensure compliance with and monitoring of the CIS Red Hat OpenShift benchmark.

Integrate and automate vulnerability analysis and image signing in CI/CD.

Define and enforce admission rules (Validating/Mutating Webhooks, OPA/Gatekeeper or Kyverno).

Monitor runtime security (anomaly detection, suspicious behavior).

Design and maintain the multi-tenant network segmentation strategy (isolation of namespaces, projects, environments).

Participate in the creation of NetworkPolicies.

Analyze OpenShift audit logs and integrate them into the company's SIEM.

Participate in the management of vulnerabilities (CVEs) affecting the platform or the containerization chain.

Write guides for secure development best practices and support application teams.

Strong constraint of the project:

Heterogeneous environment, On-premise and Public Cloud

Profile Sought

Technical Skills:

Language Skills:

Work Environment

• Securing OpenShift Clusters & Control Plane
• Container Security & DevSecOps Chain
• Architecture & Network Segmentation
• Security Maintenance (MCS) & Incident Response
• Container Security
• Expert
• Mandatory
• Openshift and Kubernetes
• Application Security
• Confirmed
• Important
• DevSecOps
• Professional English (Mandatory)

Project details

• Start: ASAP
• Duration: 18 mois
• Remote: hybrid
• Location: Paris, Île-de-France, FR
• Languages: French