Operational Security Engineer – Openshift and Container Security – Level 4

Keoni; Paris; Hybride; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Keoni Consulting is seeking an OpenShift and Container Security Expert to lead security across the entire OpenShift-based value chain, from architecture to runtime. You will implement least privilege, secret management, and CIS benchmarking, while integrating vulnerability scanning, image signing, and policy governance within CI/CD pipelines.

The role requires strong operational experience in OpenShift, Kubernetes, and DevSecOps, with professional English.

Qualifications

• Container Security – Expert – Essential
• OpenShift and Kubernetes – Expert – Essential
• Application Security – Proficient – Important
• DevSecOps – Proficient – Important

Responsabilités

• Secure OpenShift clusters and control plane, enforce least privilege via RBAC and SCC.
• Integrate vulnerability scanning and image signing within CI/CD and manage Webhooks/OPA Gatekeeper.
• Design and maintain multi-tenant network segmentation and draft Network Policies.
• Analyze OpenShift audit logs, manage CVEs, and author best practice guides for secure development.

Connaissances

Container Security

OpenShift and Kubernetes

Application Security

DevSecOps

Description du poste

Context: Overall objective: To support container security, OpenShift; vulnerability analysis and managementAs part of our efforts to strengthen the security of our cloud-native infrastructures, we are seeking an OpenShift and Container Security Expert (M/F) with solid operational experience. Integrated into the Security teams, you will be the technical lead across the entire value chain: from securing the overall architecture to container runtime, including fine-grained network segmentation within clusters.MISSIONS 1. Securing OpenShift Clusters & the Control Plane: Deploy and enforce the least privilege model via RBAC and Security Context Constraints (SCC). Harden the configuration of nodes, IPI/UPI, and Control Plane components (etcd, API Server). Implement and manage secret rotation, certificate management, and integration with a secret manager. Ensure compliance and monitoring of the Red Hat OpenShift CIS benchmark.2. Container Security & DevSecOps Chain: Integrate and automate vulnerability scanning and image signing within CI/CD. Define and enforce admission rules (Validating/Mutating Webhooks, OPA/Gatekeeper, or Kyverno). Monitor runtime security (anomaly detection, suspicious behavior).3. Network Architecture & Segmentation: Design and maintain the multi-tenant network segmentation strategy (isolation of namespaces, projects, environments). Participate in the drafting of Network Policies.4. Security Maintenance (MCS) & Incident Response: Analyze OpenShift audit logs and integrate them into the company's SIEM. Participate in the management of vulnerabilities (CVEs) affecting the platform or containerization chain. Write best practice guides for secure development and support application teams.Key project constraint: Heterogeneous environment, on-premises and public cloudTechnical Skills • Container Security – Expert – Essential • OpenShift and Kubernetes – Expert – Essential • Application Security – Proficient – Important • DevSecOps – Proficient – ImportantLanguage skills • Professional English (Important)Application: CV + Cover Letter + Copy of diplomas to be sent to [e-mail]. Founded in 2008, Kéoni Consulting is an IT consulting and engineering firm specializing in the banking, financial markets, insurance, and industrial sectors. We are the partner for major accounts in their digital transformation. We help them transform their business model, align their operational processes, select the best technologies, and mitigate and overcome the risks associated with digitalization. Kéoni Consulting helps companies to: Make a difference, Innovate and create , Reinvent their business, Satisfy customers , Gain a competitive advantage, Become the leader in their sector, Become the leader in your sector. Our activity covers the entire lifecycle of information systems (Project Management, Business Analysis Consulting, Design, Implementation, Maintenance, Production, Operation).**Job Category:** Digital Transformation**Job Type:** Full Time**Work location:** Europe