Kubernetes Engineer (Container Security)

Kubernetes Engineer (Container Security)

Toronto ON Hybrid

Required Skills:

• 7+ years of experience with Google cloud computing platform.
• 7+ years of experience with container technologies such as Kubernetes, Google Kubernetes Engine (GKE) GDC, AKS, Docker, Podman.
• Hands-on experience generating, consuming, validating, and managing SBOMs for container images, including SPDX and CycloneDX formats and integration with CI/CD and vulnerability management workflows.
• Strong knowledge of enterprise container image management, including OCI registries, image naming and tagging standards, immutable digests, approved base image catalogs, promotion workflows, retention policies, and image lifecycle governance.
• Experience implementing container image security controls, including vulnerability and malware scanning, secrets detection, image signing, provenance, attestations, admission policies, and remediation of vulnerable image components.
• Experience with container supply chain and image security tooling such as Aqua Security, Wiz, Trivy, Syft, Grype, Cosign, or equivalent enterprise tools.
• Familiarity with Cloud PaaS Services such as Google Cloud Run, Google GKE Autopilot and Anthos Service Mesh
• Experience developing CI/CD pipelines using technologies such as GitHub Actions, Jenkins.
• Experience using IaC (Infrastructure-as-Code) tools such as Terraform, ARM, Bicep.
• Strong understanding of DevOps/Platform Engineering principals.
• Strong programming/scripting skills in languages such as Python, Go, bash/shell, Java, NodeJS.
• Familiarity with Cloud CLIs and SDKs.
• Familiarity writing/consuming REST APIs.
• Strong understanding of Network security principles, encryption protocols and identity management concepts.
• Strong understanding of Kubernetes Resource Types (i.e. Cluster Roles, Services, Deployments etc.)
• Experience developing Helm Charts
• Experience implementing Kubernetes technologies such as Network Policies, Service Mesh, Certificate Manager, Ingress Controllers
• Experience developing compliance policies/scripts using tools such as Google Org Policy, Aquasec, Wiz.
• Knowledge of monitoring tools such as Datadog, Grafana, and Prometheus.
• Strong fundamental knowledge of Operating Systems (RHEL, Ubuntu)
• Demonstrated knowledge of container provisioning and administration, cloud bursting, cloud interoperability, cloud disaster recovery and business continuity strategies.
• Understanding of Public Key Infrastructure (PKI), managing public key and private key certificates in Cloud environment for Paas services and applications
• Excellent written and verbal communication skills with the ability to communicate clearly with all levels within the team.
• Critical thinker with strong research and analytics skills.
• Initiative-taking individual with a positive attitude and an ability to work independently and in a team.