Required skills
- Container Security
- OpenShift
- Kubernetes
- Application Security
- DevSecOps
- RBAC
- Security Context Constraints (SCC)
- CIS Red Hat OpenShift Benchmark
- CI/CD
- Webhooks
- OPA/Gatekeeper
- Kyverno
Languages: French
Job description
Seeking an OpenShift and Container Security Expert to enhance cloud-native infrastructure security, focusing on container security, vulnerability analysis, and management within a heterogeneous on-premise and public cloud environment.
Project overview
For a banking sector player
Context and mission details
Overall objective:
Support container security, OpenShift; vulnerability analysis and management
Strong project constraint:
Heterogeneous environment, On premise and Public Cloud
Technical skills:
Language skills:
Detailed description:
As part of strengthening the security of our cloud-native infrastructures, we are looking for an OpenShift and Container Security Expert (M/F) with solid operational experience.
Integrated into the Security teams, you will be the technical referent for the entire value chain: from securing the overall architecture to container runtime, including fine network segmentation within the clusters.
Main missions:
Deploy and apply the least privilege model via RBAC and Security Context Constraints (SCC).
Harden the configuration of nodes, IPI/UPI, and Control Plane components (etcd, API Server).
Implement and manage secret rotation, certificate management, and integration with a secret manager.
Ensure compliance and monitoring of the CIS Red Hat OpenShift benchmark.
Integrate and automate vulnerability analysis and image signing in CI/CD.
Define and enforce admission rules (Validating/Mutating Webhooks, OPA/Gatekeeper or Kyverno).
Monitor runtime security (anomaly detection, suspicious behavior).
Design and maintain the multi-tenant network segmentation strategy (isolation of namespaces, projects, environments).
Participate in the creation of NetworkPolicies.
Analyze OpenShift audit logs and integrate them into the company's SIEM.
Participate in the management of vulnerabilities (CVEs) affecting the platform or the containerization chain.
Write guides for secure development best practices and support application teams.
- Container Security
- Expert
- Mandatory
- Openshift and Kubernetes
- Application Security
- Experienced
- Important
- DevSecOps
- Professional English (Mandatory)
- Securing OpenShift clusters & Control Plane
- Container Security & DevSecOps Chain
- Architecture & Network Segmentation
- Security Maintenance (MCS) & Incident Response
Project details
- Start: flexible
- Remote: hybrid
- Location: Paris, France, FR
- Rate: 85-85 EUR/h
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on collective.work