Container Security Engineer - Kubernetes, GCP & DevSecOps.
- Toronto, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
This role focuses on securing enterprise container platforms, cloud-native infrastructure, and software supply chains.
The ideal candidate has 8+ years of experience with GCP, Kubernetes, container security, SBOM management, and security automation.
What You Bring
- 7+ years of experience with Google Cloud Platform (GCP)
- Strong hands-on experience with Kubernetes, GKE, GDC, AKS, Docker, and Podman
- Expertise in container image security, lifecycle management, OCI registries, and vulnerability remediation
- Experience with SBOM generation and management using SPDX and CycloneDX
- Knowledge of image signing, Cosign, provenance, attestations, and admission policies
- Experience with Aqua Security, Wiz, Trivy, Syft, or Grype
- Strong knowledge of Terraform, CI/CD, GitHub Actions, and Jenkins
- Experience with Helm Charts, Ingress Controllers, Network Policies, and Service Mesh
- Scripting skills in Python, Go, Bash, or Shell
- Knowledge of cloud security, IAM, encryption, PKI, and network security
- Familiarity with Prometheus, Grafana, and Datadog
- Design, deploy, and secure Kubernetes-based container environments
- Manage container image lifecycle, registries, and approved base images
- Integrate SBOM generation, image scanning, signing, and security policies into CI/CD pipelines
- Automate infrastructure provisioning and security controls using Terraform
- Conduct vulnerability assessments, security audits, and remediation
- Implement runtime protection, monitoring, and incident response practices
- Define container security standards and guide development and operations teams
- Support disaster recovery and business continuity planning
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
- Terraform Associate
- CISSP or CISM certification
- Experience with Google Cloud Run, GKE Autopilot, or Anthos Service Mesh
More about this job
Responsibilities
Design, deploy, and secure Kubernetes-based container environments, managing image lifecycles, registries, and approved base images. Integrate SBOM generation, scanning, signing, and security policies into CI/CD; automate infrastructure controls, assess and remediate vulnerabilities, and support runtime protection, incident response, and disaster recovery.
Requirements
The role calls for 7+ years of GCP experience and strong hands-on expertise in Kubernetes and container platforms, container image security, SBOMs, and security automation. Candidates should also have experience with Terraform, CI/CD tools, scripting, cloud security, and monitoring; CKA, CKS, Terraform Associate, CISSP, or CISM certifications are listed as nice to have.
Skills
- Google Cloud Platform
- Kubernetes
- GKE
- Container Security
- Docker
- Podman
- SBOM Management
- Image Signing
- Terraform
- CI/CD
- GitHub Actions
- Jenkins
- Vulnerability Remediation
- Python
- Go
- Cloud Security
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Software
- Security & Safety
- Engineering
Keywords
- Google Cloud Platform
- Kubernetes
- GKE
- GDC
- AKS
- Docker
- Podman
- Container Image Security
- OCI Registries
- SBOM
- SPDX
- CycloneDX
- Cosign
- Image Signing
- Provenance
- Attestations
- Admission Policies
- Aqua Security
- Wiz
- Trivy
- Syft
- Grype
- Terraform
- CI/CD
- GitHub Actions
- Jenkins
- Helm Charts
- Network Policies
- Python
- Go