Paris · Full-time · Senior (6-9 yrs)
Docker Image Governance Expert, Platform Engineering / DevSecOps, banking, Paris
Build the trust layer of the container image supply chain for a major corporate and investment bank in Paris: signing, scanning, registries, Kubernetes admission.
- Docker / Podman
- Harbor / Artifactory
- Trivy / Cosign / SBOM
- Kubernetes / OpenShift
- OPA Gatekeeper / Kyverno
- GitLab CI / ArgoCD
ApplyPermanent contract, salary depending on profile
A major corporate and investment bank in Paris is standardising and securing its cloud-native infrastructure. The job: a group-wide governance framework for container images that holds up against financial-sector regulation.
The role
- Define image governance policy: naming, versioning, labels, lifecycle, compliance as code
- Set up vulnerability scanning (Trivy, Snyk, Grype, Clair) and CI/CD blocking rules
- Guarantee signing and traceability: Cosign, Notary, SBOM (SPDX, CycloneDX)
- Run and secure registries (Harbor, Artifactory, ECR, ACR), promotion across environments, retention
- Deploy admission controllers (OPA Gatekeeper, Kyverno): allowlists, digest enforcement
- Drive CVE remediation, KPIs, runbooks and audits
What we are looking for
- 8+ years in containerised, cloud-native environments
- Governance or platform engineering at scale
- Kubernetes / OpenShift, Helm, GitLab CI, Jenkins, ArgoCD, Terraform
- Regulated environments (banking, insurance) a strong plus
- CKA / CKS / DCA a plus
- Technical English; right to work in France required
Apply
Docker Image Governance Expert, Platform Engineering / DevSecOps, banking, Paris
