A. Image Lifecycle & Security Remediation

• Image Hardening & Maintenance: Create, update, and ensure the security of technical, functional, and editor Docker images.
• Vulnerability Remediation: Proactivelyidentifyvulnerabilities and perform the technical "fixes" (updating base images, patching dependencies, and refactoringDockerfiles) to ensure security compliance.
• Continuous Improvement: Applydeveloperbest practices (e.g., SOLID, Craft) to ensure images are not only secure but also maintainable and scalable.
• Validation & Deployment: Upon delegation, update imagereferencesand trigger CI/CD toolchains tovalidatethe technical behavior and security integrity of new images.

B. Operational Governance & Reporting

• Activity Tracking: Organize and track all assigned activities, providing weekly feedback and local KPI production to the Cloud DevOps COE team.
• Catalog Management: Maintainand regularly update the list of all available images (at least bi-monthly) and communicate changes to developer teams.
• Proactive Alerting: Activelymonitorand alert development teamsregardingthe use of obsolete or non-compliant images to prevent securityregressions.

• Task Prioritization: Classify and organize requests and topics to ensure alignment with priority subjects and COE objectives.

Contributing Responsibilities

• Developer Advocacy: Provide functional and technical support to users during the development, build, scanning, and releasing phases.
  • Global Collaboration: Assistsubsidiaries and partners during the onboarding phase to ensure seamless integration into the secure container ecosystem.