OpenShift & Kubernetes Security Consultant – DevSecOps

Project overview

Context of the mission

As part of strengthening the security of its Cloud Native infrastructures, a large group is looking for an OpenShift and Kubernetes Security Expert to support the security of its containerization platforms.

The mission takes place in a hybrid technical environment, combining On-Premise and public Cloud infrastructures.

The consultant will act as a technical referent for the Security and Infrastructure teams, with the objective of strengthening the protection of clusters, industrializing security controls, and mastering vulnerabilities throughout the lifecycle of containerized applications.

Main missions

Securing OpenShift and Kubernetes platforms

Container security and DevSecOps

Network architecture and security

Vulnerability management and security maintenance

• Define and apply security best practices on OpenShift and Kubernetes clusters.
• Strengthen access and rights management through RBAC and SCC mechanisms.
• Secure nodes, Control Plane components, and cluster configurations.
• Implement secret management mechanisms and certificate rotation.
• Control environment compliance according to CIS recommendations and security standards.
• Participate in securing hybrid On-Premise and public Cloud architectures.
• Integrate security controls into CI/CD pipelines.
• Automate vulnerability analysis and container image verification.
• Implement image signing and control mechanisms.
• Define workload admission policies with OPA/Gatekeeper, Kyverno, or Webhooks.
• Deploy runtime monitoring and suspicious behavior detection systems.
• Support development teams in adopting DevSecOps practices.
• Design and strengthen cluster network segmentation.
• Define isolation rules between namespaces, projects, and environments.
• Participate in the implementation and maintenance of NetworkPolicies.
• Ensure the consistency of security measures in multi-tenant architectures.
• Identify, analyze, and track vulnerabilities affecting platforms and containers.
• Participate in incident management and security issue resolution.
• Exploit OpenShift audit logs and contribute to their integration into the SIEM.
• Perform periodic security checks and participate in internal and external audits.
• Follow up on remediation plans and compliance actions.
• Analyze requests for derogation from security policies.
• Write technical standards, procedures, and best practice guides.
• Ensure technological watch and propose improvements to existing systems.

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 78-78 EUR/h
• Languages: French