Container Security Engineer - Azure Kubernetes/AKS

Container Security Engineer - Azure Kubernetes/AKS

If you have experience as a DevSecOps Engineer, Kubernetes Security Engineer, Platform Security Engineer, Container Platform Engineer, Cloud Security Engineer or Cloud Native Security Engineer, if you spend your days scanning, hardening and governing container images on Azure Kubernetes Service, we want to hear from you.

Our client, a leading global technology services organisation, is looking for a hands-on Container Security Engineer to own the security of their cloud-native platform. You'll decide what gets deployed, how it's hardened and how it's tracked from build to production, protecting mission-critical applications for some of the world's largest enterprises.

What you'll be doing

• Owning container governance on AKS: setting and enforcing image, security and deployment policies across Azure Kubernetes Service environments.
• Finding and fixing vulnerabilities: running Docker image scanning, vulnerability management and image hardening.
• Shifting security left: embedding static scanning, runtime scanning and policy enforcement directly into CI/CD pipelines.
• Running the registries: managing images and repositories across Azure Container Registry (ACR), Nexus and Artifactory.
• Controlling the image life cycle: versioning, promotion and release management, end to end.
• Building trusted images: creating and maintaining compliant, hardened base images for engineering teams to build on.
• Keeping it compliant: making sure container security best practice and organisational standards are followed, every time.

You'll work closely with DevOps and cloud architecture teams, so this is as much about enabling engineers to ship safely as it is about saying no.

What you'll bring

• Strong hands-on experience with Docker and Azure Kubernetes Service (AKS)
• Proven expertise in container image scanning, hardening and container security standards
• Hands-on experience with container security platforms such as Sysdig and/or Aqua Security
• A track record of integrating security and vulnerability management into CI/CD pipelines
• Solid knowledge of container registries and artifact management: ACR, Nexus, Artifactory
• Experience of container image release management, versioning and promotion

Nice to have

• Microsoft Sentinel or another cloud-native SIEM/SOAR
• Certifications such as CKS (Certified Kubernetes Security Specialist) or AZ-500
• Experience implementing automated compliance frameworks in large enterprise environments