Required Skills:

- 7+ years of experience with Google cloud computing platform.
- 7+ years of experience with container technologies such as Kubernetes, Google Kubernetes Engine (GKE) GDC, AKS, Docker, Podman.
- Hands-on experience generating, consuming, validating, and managing SBOMs for container images, including SPDX and CycloneDX formats and integration with CI/CD and vulnerability management workflows.
- Strong knowledge of enterprise container image management, including OCI registries, image naming and tagging standards, immutable digests, approved base image catalogs, promotion workflows, retention policies, and image lifecycle governance.
- Experience implementing container image security controls, including vulnerability and malware scanning, secrets detection, image signing, provenance, attestations, admission policies, and remediation of vulnerable image components.
- Experience with container supply chain and image security tooling such as Aqua Security, Wiz, Trivy, Syft, Grype, Cosign, or equivalent enterprise tools.
- Familiarity with Cloud PaaS Services such as Google Cloud Run, Google GKE Autopilot and Anthos Service Mesh
- Experience developing CI/CD pipelines using technologies such as GitHub Actions, Jenkins.
- Experience using IaC (Infrastructure-as-Code) tools such as Terraform, ARM, Bicep.
- Robust understanding of DevOps/Platform Engineering principals.
- Strong programming/scripting skills in languages such as Python, Go, bash/shell, Java, NodeJS.
- Familiarity with Cloud CLIs and SDKs.




- Familiarity writing/consuming REST APIs.
- Strong understanding of Network security principles, encryption protocols and identity management concepts.
- Strong understanding of Kubernetes Resource Types (i.e. Cluster Roles, Services, Deployments etc.)
- Experience developing Helm Charts
- Experience implementing Kubernetes technologies such as Network Policies, Service Mesh, Certificate Manager, Ingress Controllers
- Experience developing compliance policies/scripts using tools such as Google Org Policy, Aquasec, Wiz.
- Knowledge of monitoring tools such as Datadog, Grafana, and Prometheus.
- Strong fundamental knowledge of Operating Systems (RHEL, Ubuntu)
- Demonstrated knowledge of container provisioning and administration, cloud bursting, cloud interoperability, cloud disaster recovery and business continuity strategies.
- Understanding of Public Key Infrastructure (PKI), managing public key and private key certificates in Cloud environment for Paas services and applications
- Excellent written and verbal communication skills with the ability to communicate clearly with all levels within the team.
- Critical thinker with strong research and analytics skills.
- Initiative-taking individual with a positive attitude and an ability to work independently and in a team.
- Professional certifications such as Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), Certified Terraform Associate or other relevant security certifications (i.e. CISSP, CISM)

📌 Container Security Engineer (Toronto)
🏢 Cloudious
📍 Toronto