Posted 8 days ago
Container Security Engineer - Kubernetes, GCP & DevSecOps.
@ J&M Group
Toronto, Ontario
SIGNALS
Requirements summary:
- The ideal candidate has 8+ years of experience with GCP, Kubernetes, container security, SBOM management, and security automation.
- 7+ years of experience with Google Cloud Platform (GCP)
- Strong hands-on experience with Kubernetes, GKE, GDC, AKS, Docker, and Podman
- Expertise in container image security, lifecycle management, OCI registries, and vulnerability remediation
- Experience with SBOM generation and management using SPDX and CycloneDX
- Knowledge of image signing, Cosign, provenance, attestations, and admission policies
Tools & skills
KubernetesGoogle CloudDockerIBM TerraformCI/CDGitHubJenkinsPythonGoBashIdentity and access managementPrometheusGrafanaDatadog
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-11-02
- First seen by our source
- 2026-11-10
- Source record updated
- 2026-11-10
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
J&M Group
| Field | Value |
|---|---|
| Open jobs on Jobsy | 14 |
Job description
We are hiring for a Senior Container Security Engineer Kubernetes, GCP & DevSecOps.
This role focuses on securing enterprise container platforms, cloud-native infrastructure, and software supply chains.
The ideal candidate has 8+ years of experience with GCP, Kubernetes, container security, SBOM management, and security automation.
What You Bring
This role focuses on securing enterprise container platforms, cloud-native infrastructure, and software supply chains.
The ideal candidate has 8+ years of experience with GCP, Kubernetes, container security, SBOM management, and security automation.
What You Bring
- 7+ years of experience with Google Cloud Platform (GCP)
- Strong hands-on experience with Kubernetes, GKE, GDC, AKS, Docker, and Podman
- Expertise in container image security, lifecycle management, OCI registries, and vulnerability remediation
- Experience with SBOM generation and management using SPDX and CycloneDX
- Knowledge of image signing, Cosign, provenance, attestations, and admission policies
- Experience with Aqua Security, Wiz, Trivy, Syft, or Grype
- Strong knowledge of Terraform, CI/CD, GitHub Actions, and Jenkins
- Experience with Helm Charts, Ingress Controllers, Network Policies, and Service Mesh
- Scripting skills in Python, Go, Bash, or Shell
- Knowledge of cloud security, IAM, encryption, PKI, and network security
- Familiarity with Prometheus, Grafana, and Datadog
- Design, deploy, and secure Kubernetes-based container environments
- Manage container image lifecycle, registries, and approved base images
- Integrate SBOM generation, image scanning, signing, and security policies into CI/CD pipelines
- Automate infrastructure provisioning and security controls using Terraform
- Conduct vulnerability assessments, security audits, and remediation
- Implement runtime protection, monitoring, and incident response practices
- Define container security standards and guide development and operations teams
- Support disaster recovery and business continuity planning
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
- Terraform Associate
- CISSP or CISM certification
- Experience with Google Cloud Run, GKE Autopilot, or Anthos Service Mesh
Journal
Only you can see this. Kept on this device, and in your account when you sign in.