Dans le cadre du renforcement de la sécurité de nos infrastructures cloud natives, nous recherchons un Expert Sécurité OpenShift et conteneurs (H/F) disposant d'une solide expérience opérationnelle. Intégré(e) aux équipes Sécurité, vous serez le/la référent(e) technique sur l'ensemble de la chaîne de valeur : de la sécurisation de l'architecture globale jusqu'au runtime des conteneurs, en passant par la segmentation réseau fine au sein des clusters. 1. Sécurisation des clusters OpenShift & du Control Plane Déployer et appliquer le modèle de moindre privilège via le RBAC et les Security Context Constraints (SCC). Durcir (hardening) la configuration des noeuds, de l'IPI/UPI et des composants du Control Plane (etcd, API Server). Implémenter et gérer la rotation des secrets, la gestion des certificats et l'intégration avec un gestionnaire de secrets Assurer la conformité et le suivi du benchmark CIS Red Hat OpenShift. 2. Sécurité des conteneurs & chaîne DevSecOps Intégrer et automatiser l'analyse de vulnérabilités et la signature des images dans la CI/CD Définir et faire appliquer les règles d'admission (Validating/Mutating Webhooks, OPA/Gatekeeper ou Kyverno). Surveiller la sécurité au runtime (détection d'anomalies, comportement suspect) 3. Architecture & Segmentation Réseau Concevoir et maintenir la stratégie de segmentation réseau multi-tenant (isolation de namespaces, projets, environnements). Participer à la redation des NetworkPolicies . 4. Maintien en condition de sécurité (MCS) & Réponses aux incidents Analyser les logs d'audit OpenShift et les intégrer au SIEM de l'entreprise. Participer à la gestion des vulnérabilités (CVE) affectant la plateforme ou la chaîne de conteneurisation. Rédiger les guides de bonnes pratiques de développement sécurisé et accompagner les équipes applicatives.
Years of relevant experience 5+ years Education Level Bachelor's Degree Career Level Experienced (Non-Manager) DevOps Developer We are currently seeking a DevOPS Developer engineer to take on the responsibility of the Systems Administration role/department. The ideal candidate will have a minimum of 5 years commercial experience of managing large and diverse systems with a specialism and focus towards LAMP based systems. This is a fantastic opportunity for an experienced DevOPS to join our expanding team, managing our servers. You must have performance tuning experience with Linux (preferably Centos 6.X), Apache 2.X, MySQL 5.X and PHP 5.X. Overview: We currently develop and host a bespoke high performance e-commerce platform on behalf of our established clients. Server setups vary from single dedicated servers to a load-balanced web nodes with database active-passive cluster. The infrastructure is managed hosting with 2 providers and over 30 servers. What You Will Be Doing: The successful candidate will reactively and proactively manage and monitor the infrastructure and ensure any issues are investigated in a timely manner either first hand or delegated to the hosting provider depending on the priority/severity of the issue. Based in Central London and reporting to the Tech Director, the DevOPS will work close with the development team to ensure a dynamic, robust, and scalable infrastructure to support our platform, 'Aurora'. On a daily basis you will be responsible for the smooth running of Aurora Commerce production and development servers What You Need for this Position: Required Technologies with performance tuning experience: Linux – preferably Centos 6.X Apache 2.X MySQL 5.X PHP5.X Required Skills: *Solid Linux systems engineering/administration experience *At least 5 years experience working in a high traffic, production web based environment *Experience with 24/7 Linux based web operations environment *A good understanding of: HTTP and HTTPS DNS TCP/IP Networking principles Firewalls rules and configuration Experience of virtualisation technologies and virtualisation management (KVM, VMware, AWS) *Strong verbal and written communications skills. These include proficiency in documentation, and creating policies, procedures, and standards Advantageous but Not Essential (nice to have): Varnish Memcached Redis Sphinx VSFTP SVN Redhat Clustering GFS NFS Salary will be in the range £40K - £55K Please send your CV in Word format, along with your salary and availability details.
