Container Security Engineer

Container Security Engineer

Location

Toronto, Canada

Pay Rate

CAD 50-55/hr. on T4

Work model

Hybrid (3-4 days to office)

JD

Roles and Responsibilities

• Design, deploy and manage containerized environments using Kubernetes, GKE (Google Kubernetes Engine), AKS, or similar platform.
• Document security configurations, procedures and guidelines for containerized environments, ensuring compliance with organizational standards and regulatory requirements.
• Develop and maintain security tools, scripts, and automation workflows to enhance container security operations and incident response capabilities.
• Utilize IaC ( Infrastructure-as-Code) tools such as Terraform to automate infrastructure provisioning, ensure consistent configuration and prevent drift.
• Work with microservice architecture, designing APIs, managing Ingress controllers, and implementing service meshes for improved scalability and security.
• Develop CI/CD Pipelines using GitHub Actions/Workflows to build and deploy containers.
• Stay updated with emerging security threats and industry best practices related to container security and cloud-native technologies.
• Consult with vulnerability assessments, security audits and penetration testing to identity security gaps within containerized environments.
• Address security gaps identified within containerized environments.
• Provide guidance and support to developers and operations teams on secure containerization practices, images scanning and runtime protection.
• Own container image lifecycle management, including approved base images, registry governance, versioning and tagging standards, digest pinning, image promotion across environments, retention, deprecation, and removal of vulnerable or obsolete images.
• Integrate Software Bill of Materials (SBOM) generation, validation, storage, and analysis into CI/CD pipelines for container images, using machine-readable formats such as SPDX or CycloneDX.
• Implement container image signing, provenance and attestation controls, and policy enforcement to verify image integrity and approved software supply chain sources before deployment.
• Participate in incident response activities, security incident investigations and post-mortem analysis to improve incident handling processes.
• Document security configurations, procedures and guidelines for containerized environments, ensuring compliance with organizational standards and regulatory requirements.
• Monitor containerized environments to Eligible to workimize performance and utilization
• Develop and Test Disaster Recovery (DR) and Business Continuity Plans (BCP)