Devsecops

Need specialized skills with understanding and experience in CVE, Security models, Curation process for image and fixing of auto Vulnerabilities

Image Curation & Governance

Define and maintain what images are allowed and trusted across the NYL.

Security & Compliance

Scan images for: Vulnerabilities (CVEs) Malware, License compliance issues

Manage image signing

Image Lifecycle Management

They manage the full lifecycle of container images with versioning and tagging strategies / promotion (e.g., latest vs immutable tags)

Registry Management (JFrog / ECR)

They maintain and optimize container registries to Handle replication and synchronization across regions/accounts

Kubernetes Image Management

They ensure Kubernetes workloads use the right images by Updating image references in Kubernetes manifests/Helm charts

Migration of Docker Images (ECR / JFrog / K8s)

Rewrite image paths in: Kubernetes YAMLs, Helm charts, CI/CD pipeline

CI/CD Integration Embed image curation into pipelines.

Automate: with harness and Artifactory

Image builds

Security scans

Promotion workflows

Enforce fail builds on vulnerability policies

Automation

Manual handling doesn't scale—automation is key.

Build Scripts/tools For

Bulk image migration

Tagging and cleanup

Policy enforcement

Monitoring & Troubleshooting

Monitor registry usage, failures, and latency

Troubleshoot

Image pull errors

Authentication issues

Broken dependencies

Audit logs and usage patterns