Container Governance Engineer (AKS)

Start: asap
Period: 6 months+
Possible extension: YES
Hours per week: 40
ZZP not possible

.

We are looking for a Senior Container Governance Engineer who will be responsible for the governance, security and lifecycle management of container images within an Azure environment.

Key Responsibilities

• Manage container image governance and security for Azure Kubernetes Service (AKS).
• Manage, deploy and maintain Docker container images within Azure-based environments.
• Manage container images and repositories in container registries such as Azure Container Registry (ACR), Nexus and JFrog Artifactory.
• Implement container image scanning, vulnerability management and container image hardening.
• Define and enforce container security policies and standards.
• Integrate security scanning, policy enforcement and image validation into CI/CD pipelines.
• Manage and oversee Docker image deployment across environments.
• Oversee image release management, versioning, promotion and lifecycle management.
• Ensure containers and images comply with organizational security standards and container security best practices.
• Manage container lifecycle from image creation and validation through deployment, promotion and retirement.
• Contribute to software supply chain security, including secure image creation, dependency management, vulnerability scanning and release controls.
• Build and maintain compliant container images using standard tools and established security practices.
• Manage and operate static and runtime container scanning solutions.
• Work with security and development teams to identify and remediate vulnerabilities in container images and deployments.
• Support governance and compliance requirements across the container platform.
• Work with Azure Sentinel for security monitoring and investigation.

Required Skills

• Strong experience with Microsoft Azure, preferably with Azure Kubernetes Service (AKS).
• Strong hands-on experience with Docker and containerized applications.
• Proven experience with Docker image deployment and container image management.
• Strong knowledge of ACR, Nexus and JFrog Artifactory container registries.
• Experience with container image scanning, vulnerability management and image hardening.
• Hands-on experience with Sysdig and/or Aqua Security.
• Experience integrating container security and image scanning into CI/CD pipelines.
• Strong understanding of container security standards and policies.
• Experience with container release management, versioning, promotion and lifecycle management.
• Knowledge of software supply chain security and container lifecycle management.
• Experience with static and runtime container scanning.
• Knowledge of Azure Sentinel.
• Good understanding of Kubernetes and container deployment concepts.
• Development experience with one or more of the following is a good to have: Java, Python, .NET, Go (Golang), Rust or C++.