OpenShift and Container Security Expert – 2

Keoni; Paris; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

Keoni is seeking an OpenShift and Container Security Expert to lead security across on-prem and cloud environments. You will harden clusters, enforce least privilege, and manage secret rotation while integrating vulnerability scanning and image signing into CI/CD.

The role requires strong DevSecOps practices, network segmentation, and incident response capabilities. Fluent English is essential, and the team operates with a security-first mindset in a fast-paced cloud-native environment.

Qualifications

• Experience securing OpenShift clusters and control plane components.
• Strong knowledge of container security practices and runtime protections.
• Familiarity with security benchmarks, RBAC, and SCCs.

Responsibilities

• Secure OpenShift clusters and control plane components, enforcing least privilege and secret rotation.
• Integrate vulnerability scanning, image signing, and admission controls (Webhook policies).
• Monitor runtime security and respond to anomalies; draft security best practices for teams.

Skills

OpenShift

Kubernetes

Container Security

DevSecOps

Application Security

Tools

OpenShift

Kubernetes

Job description

Context: Overall objective: To support container security, OpenShift; vulnerability analysis and management. Operational Security Engineer – Container Security – Level 4Significant project constraint : Heterogeneous environment, on-premises and public cloud. As part of strengthening the security of our cloud-native infrastructures, we are seeking an OpenShift and Container Security Expert (M/F) with solid operational experience. Integrated into the Security teams, you will be the technical lead across the entire value chain: from securing the overall architecture to container runtime, including fine-grained network segmentation within clusters.Main responsibilities: 1. Securing OpenShift clusters & the Control Plane: Deploy and enforce the least privilege model via RBAC and Security Context Constraints (SCC). Harden the configuration of nodes, IPI/UPI, and Control Plane components (etcd, API Server). Implement and manage secret rotation, certificate management, and integration with a secret manager. Ensure compliance and monitoring of the Red Hat OpenShift CIS benchmark.2. Container Security & DevSecOps Chain: Integrate and automate vulnerability scanning and image signing within CI/CD. Define and enforce admission rules (Validating/Mutating Webhooks, OPA/Gatekeeper, or Kyverno). Monitor runtime security (anomaly detection, suspicious behavior).3. Network Architecture & Segmentation: Design and maintain the multi-tenant network segmentation strategy (isolation of namespaces, projects, environments). Participate in the drafting of Network Policies.4. Security Maintenance (MCS) & Incident Response: Analyze OpenShift audit logs and integrate them into the company's SIEM. Participate in the management of vulnerabilities (CVEs) affecting the platform or containerization chain. Write best practice guides for secure development and support application teams.Technical Skills • Container Security – Expert – Essential • OpenShift and Kubernetes – Expert – Essential • Application Security – Proficient – Important • DevSecOps – Proficient – ImportantLanguage skills • Professional English (Important)Application: CV + cover letter + copies of diplomas to be sent to [e-mail]