Senior Container Image Security Engineer

Project overview

Job Summary

Key Responsibilities

NA

Skill Requirements

Other Requirements

• Required skills and attributes 8+ years in DevOps, Platform Engineering, Infrastructure Security, or a related field. Strong hands-on experience with Docker, Python automation, Linux administration, and vulnerability remediation. Expertise in Dockerfiles, multi-stage builds, image optimization, container registries, and container security. Experience with CI/CD pipelines, GitHub Actions, Git, Terraform, and Ansible. Knowledge of Linux hardening, patching, package management, CVE remediation, and security scanning. Strong ownership, problem-solving, automation, and cross-functional collaboration skills.
• Preferred skills and attributes Experience managing enterprise Golden Images at scale. Knowledge of Kubernetes, Helm, Azure, and Azure Container Registry. Experience with SBOMs, image signing, software supply-chain security, and CIS benchmarks. Familiarity with Cosign, Notary, Open Policy Agent, Kyverno, Bash, Prometheus, Grafana, or Azure Monitor. Experience in policy-as-code, cloud security, and vulnerability exception management.
• AI Skills: All contractor resources are expected to demonstrate baseline proficiency in enterprise-approved AI tools as part of their day-to-day responsibilities. This includes, but is not limited to: \\\\r\\\\n\\\\r\\\\nConsistent Use: Maintain a minimum of 90% weekly usage of AI tools such as GitHub Copilot, Microsoft 365 Copilot, and other GenAI platforms approved by the enterprise.\\\\r\\\\nApplied Productivity: Leverage AI tools to enhance coding, documentation, data analysis, and decision-making workflows.\\\\r\\\\nContinuous Learning: Stay current with evolving AI capabilities and features, and apply them to improve delivery quality and velocity.
• Primary responsibilities Design, build, secure, optimize, and maintain Docker-based Golden Images. Analyze and remediate operating-system, application, library, and container vulnerabilities. Develop Python tooling to automate image generation, validation, patching, testing, and compliance reporting. Build and maintain CI/CD pipelines for image scanning, promotion, publishing, and release management. Manage Linux hardening, patching, dependencies, performance, and image lifecycle standards.
• Preferred prior experience and domain expertise Enterprise Golden Image, container platform, DevOps, or infrastructure-security engineering. Linux operating systems, vulnerability management, security hardening, and software supply-chain security. Secure image lifecycle management in a large, regulated, or compliance-driven enterprise. Collaboration across Platform Engineering, Security, Cloud Infrastructure, and Application Development teams.

Project details

• Start: flexible
• Location: MN - Minnesota, US
• Languages: English