Saviynt’s Enterprise Identity Cloud helps modern enterprises scale cloud initiatives and solve the toughest security and compliance challenges in record time. The company brings together identity governance (IGA), granular application access, cloud security, and Privileged Access Management(PAM) to secure the entire business ecosystem and provide a frictionless user experience. The world’s largest brands trust Saviynt to accelerate digital transformation, empower distributed workforces, and meet continuous compliance. We are a distributed global R\&D team that is extremely focused on building a platform that solves the toughest security and compliance challenges while helping Saviynt maintain its leadership position in delivering enterprise identity cloud solutions.
WHAT YOU WILL BE DOING
Design and Build Base Images for multiple runtimes (Java, Python, Node.js, Go, etc.)
Good understanding of multi-stage builds, distroless, caching, and minimal OS layers to reduce size and speed up builds
Use Cosign to sign and verify images, ensuring end-to-end supply chain trust
Strong understanding of security and compliance such as FIPS 140-2/3, CIS, STIG and NIST
Collaborate with Engineering, DevSecOps, Cloud Platform, and Security Compliance teams to align image contents with infrastructure, compliance, and runtime needs across all environments
Deep Linux expertise (Alpine, Ubuntu, RHEL etc…) , package management, and hardening knowledge to secure base layers
Build and manage automated image pipelines using GitLab CI
Maintain image governance through versioning, tagging, and lifecycle policies across internal and external registries
Distribute and manage images across AWS, Azure, and GCP registries with signature checks
Ensure base images are optimized for K8s workloads and integrate with Helm charts and DevOps pipelines
Embed image scanning and compliance checks using Amazon Inspector, MicroSoft Defender, Trivy, Grype etc.
Work closely with the ConMon (Continuous Monitoring) team to share vulnerability results, apply fixes and maintain false positives dashboards
WHAT YOU BRING
Expert in Docker, Linux, and container image optimization
Hands-on with Cosign, Sigstore, and container supply chain security
Strong understanding of DevOps, Kubernetes, and multi-cloud ecosystems
Familiar with FIPS, CIS, FedRAMP, and NIST compliance frameworks
Skilled in Bash or Python scripting for automation