Required skills
- OpenShift
- Kubernetes
- RBAC
- Security Context Constraints (SCC)
- Hardening
- Secret Management
- Certificate Management
- CIS Benchmarks
- DevSecOps
- CI/CD
- Image Scanning
- Admission Controllers
- OPA/Gatekeeper
- Kyverno
- Runtime Security
- Network Segmentation
- NetworkPolicy
- Vulnerability Management
- SIEM
Languages: French
Job description
Seeking an expert to secure OpenShift clusters, container environments, and the DevSecOps pipeline. Responsibilities include RBAC implementation, node hardening, vulnerability management, and network segmentation.
Project overview
Context
As a result of an industrial logic, this is an Economic Interest Grouping (GIE) that aims to consolidate infrastructures and pool purchases in order to optimize costs and strengthen the quality of service for the entire IT production of the Group. It also offers value-added infrastructure services (email, videoconferencing, etc.) for users and information systems.
Missions
- Securing OpenShift clusters & the Control Plane
- Deploy and apply the principle of least privilege via RBAC and Security Context Constraints (SCC).
- Harden the configuration of nodes, IPI/UPI, and Control Plane components (etcd, API Server).
- Implement and manage secret rotation, certificate management, and integration with a secret manager.
- Ensure compliance with and monitoring of the CIS Red Hat OpenShift benchmark.
- Container security & DevSecOps pipeline
- Integrate and automate vulnerability analysis and image signing in the CI/CD.
- Define and enforce admission rules (Validating/Mutating Webhooks, OPA/Gatekeeper or Kyverno).
- Monitor runtime security (anomaly detection, suspicious behavior).
- Network architecture & segmentation
- Design and maintain the multi-tenant network segmentation strategy (isolation of namespaces, projects, environments).
- Participate in writing NetworkPolicies.
- Security maintenance (MCS) & incident response
- Analyze OpenShift audit logs and integrate them into the company's SIEM.
- Participate in the management of vulnerabilities (CVEs) affecting the platform or the containerization pipeline.
- Write guides for secure development best practices and support application teams.
Project details
- Start: flexible
- Remote: hybrid
- Location: Paris, France, FR
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on collective.work