OpenShift and Container Security Expert (M/F)

Context: Overall objective: To support container security, Open

Shift; vulnerability analysis and management

Operational Security Engineer – Container Security – Level 4Key project constraint: Heterogeneous environment, on-premises and public cloud

As part of our efforts to strengthen the security of our cloud-native infrastructures, we are seeking an Open

Shift and Container Security Expert (M/F) with solid operational experience. Integrated into the Security teams, you will be the technical lead across the entire value chain: from securing the overall architecture to container runtime, including fine-grained network segmentation within clusters.

Main responsibilities: 1. Securing Open

Shift clusters & the Control Plane: Deploy and enforce the least privilege model via RBAC and Security Context Constraints (SCC). Harden the configuration of nodes, IPI/UPI, and Control Plane components (etc., API Server). Implement and manage secret rotation, certificate management, and integration with a secret manager. Ensure compliance and monitoring of the Red Hat Open

Shift CIS benchmark.2. Container Security & Dev

Sec

Ops Chain: Integrate and automate vulnerability scanning and image signing within CI/CD. Define and enforce admission rules (Validating/Mutating Webhooks, OPA/Gatekeeper, or Kyverno). Monitor runtime security (anomaly detection, suspicious behavior).3. Network Architecture & Segmentation: Design and maintain the multi-tenant network segmentation strategy (isolation of namespaces, projects, environments). Participate in the drafting of Network Policies.4. Security Maintenance (MCS) & Incident Response: Analyze Open

Shift audit logs and integrate them into the company's SIEM. Participate in the management of vulnerabilities (CVEs) affecting the platform or containerization chain. Write best practice guides for secure development and support application teams.

• Container Security – Expert – Essential Open

• Application Security – Proficient – Important Dev

Sec

Ops – Proficient – Important

• Professional English (Important)

Application: CV + cover letter + copies of diplomas to be sent to

#J-18808-Ljbffr