Talent.com
J M Group Inc
Container Security Engineer - Kubernetes, GCP & DevSecOps.J M Group Inc • Toronto, ON, Canada
Search for other jobs
Container Security Engineer - Kubernetes, GCP & DevSecOps.

Container Security Engineer - Kubernetes, GCP & DevSecOps.

J M Group Inc • Toronto, ON, Canada
2 days ago
Job type
  • Quick Apply
Job description

We are hiring for a Senior Container Security Engineer Kubernetes, GCP & DevSecOps.

This role focuses on securing enterprise container platforms, cloud-native infrastructure, and software supply chains.


The ideal candidate has 8+ years of experience with GCP, Kubernetes, container security, SBOM management, and security automation.

What you bring

  • 7+ years of experience with Google Cloud Platform (GCP)

  • Strong hands-on experience with Kubernetes, GKE, GDC, AKS, Docker, and Podman

  • Expertise in container image security, lifecycle management, OCI registries, and vulnerability remediation

  • Experience with SBOM generation and management using SPDX and CycloneDX

  • Knowledge of image signing, Cosign, provenance, attestations, and admission policies

  • Experience with Aqua Security, Wiz, Trivy, Syft, or Grype

  • Strong knowledge of Terraform, CI/CD, GitHub Actions, and Jenkins

  • Experience with Helm Charts, Ingress Controllers, Network Policies, and Service Mesh

  • Scripting skills in Python, Go, Bash, or Shell

  • Knowledge of cloud security, IAM, encryption, PKI, and network security

  • Familiarity with Prometheus, Grafana, and Datadog

What you'll do

  • Design, deploy, and secure Kubernetes-based container environments

  • Manage container image lifecycle, registries, and approved base images

  • Integrate SBOM generation, image scanning, signing, and security policies into CI/CD pipelines

  • Automate infrastructure provisioning and security controls using Terraform

  • Conduct vulnerability assessments, security audits, and remediation

  • Implement runtime protection, monitoring, and incident response practices

  • Define container security standards and guide development and operations teams

  • Support disaster recovery and business continuity planning

Nice to have

  • Certified Kubernetes Administrator (CKA)

  • Certified Kubernetes Security Specialist (CKS)

  • Terraform Associate

  • CISSP or CISM certification

  • Experience with Google Cloud Run, GKE Autopilot, or Anthos Service Mesh

Create a job alert for this search

Container Security Engineer - Kubernetes, GCP & DevSecOps. • Toronto, ON, Canada