Container Governance Engineer (AKS)

Description

The company runs and modernises mission-critical technology systems for large enterprises, combining established expertise with AI-driven insight.

This role sits in the cloud-native infrastructure team and focuses on securing containers across the software lifecycle.

Career paths are open: you can move sideways into other technical or non-technical areas, or move up into senior leadership or specialist roles, while earning professional certifications.

Responsibilities

• Own image governance, vulnerability management and security policies for Azure Kubernetes Service (AKS) so that deployments stay resilient, compliant and scalable.
• Work with DevOps and cloud architecture teams to build security into each stage of the container lifecycle.
• Run security scanning tools and manage enterprise image registries to protect critical applications and deliver hardened solutions to customers.
• Manage container image, security and deployment policies for AKS.
• Put Docker image scanning, vulnerability management and image hardening procedures in place.
• Add runtime scanning, static scanning and policy enforcement to CI/CD pipelines.
• Manage images and repositories in Azure Container Registry (ACR), Nexus and Artifactory.
• Direct image releases, covering versioning, promotion and governance across the full lifecycle.
• Build and maintain compliant container images with the organisation's standard tools.
• Make sure container security best practices and organisational compliance standards are followed.

Requirements

• Have the experience to back up your work, with a growth mindset and drive to develop personally and professionally.
• Put customer success first in your work.
• Work openly and inclusively with others.
• Strong hands-on experience with Docker and Azure Kubernetes Service (AKS).
• Proven expertise in container image scanning, hardening and wider container security standards.
• Direct hands-on experience with container security platforms such as Sysdig and/or Aqua Security.
• Track record of building container security and vulnerability management into CI/CD pipelines.
• Deep working knowledge of container registries and artifact management in ACR, Nexus and Artifactory.
• Extensive experience managing container image releases, versioning and promotion.
• Preferred: working knowledge of Microsoft Sentinel or similar cloud-native SIEM/SOAR solutions.
• Preferred: advanced certifications in cloud security or Kubernetes, such as CKS, AZ-500 or equivalent.
• Preferred: prior experience implementing automated compliance frameworks in large enterprise environments.

Conditions

Hybrid-friendly working model.

Equal opportunity: the company welcomes applicants of all backgrounds and encourages you to apply even if you do not meet every requirement.

Benefits

• Be Well programmes supporting financial, mental, physical and social health.
• Personal development goals, career path tools and regular feedback.
• Certifications and hands-on learning with Microsoft, Google and Amazon, plus coaching.