Job Summary
Required skills and attributes 8+ years in DevOps, Platform Engineering, Infrastructure Security, or a related field.
Strong hands-on experience with Docker, Python automation, Linux administration, and vulnerability remediation.
Expertise in Dockerfiles, multi-stage builds, image optimization, container registries, and container security.
Experience with CI/CD pipelines, GitHub Actions, Git, Terraform, and Ansible.
Knowledge of Linux hardening, patching, package management, CVE remediation, and security scanning.
Strong ownership, problem-solving, automation, and cross-functional collaboration skills.
Preferred skills and attributes Experience managing enterprise Golden Images at scale.
Knowledge of Kubernetes, Helm, Azure, and Azure Container Registry.
Experience with SBOMs, image signing, software supply-chain security, and CIS benchmarks.
Familiarity with Cosign, Notary, Open Policy Agent, Kyverno, Bash, Prometheus, Grafana, or Azure Monitor.
Experience in policy-as-code, cloud security, and vulnerability exception management.
AI Skills: All contractor resources are expected to demonstrate baseline proficiency in enterprise-approved AI tools as part of their day-to-day responsibilities.
Key Responsibilities
- Primary responsibilities Design, build, secure, optimize, and maintain Docker-based Golden Images.
- Analyze and remediate operating-system, application, library, and container vulnerabilities.
- Develop Python tooling to automate image generation, validation, patching, testing, and compliance reporting.
- Build and maintain CI/CD pipelines for image scanning, promotion, publishing, and release management.
- Manage Linux hardening, patching, dependencies, performance, and image lifecycle standards.