Senior GCP DevSecOps Engineer
TESTQ Technologies · Sheffield, England, United Kingdom
Apply & track with Apply EdgeExperience 5 to 7What youll doKey responsibilities will includeBuild deploy and manage components of the GCP foundation platform using Google Cloud services eg GKE BigOuery Cloud Build Cloud Run and automationfirst engineering practicesEngineer repeatable platform and security capabilities using Infrastructure as Code laC such as Terraform andor Config Connector following established engineering standardsImplement and enhance preventive security controls and guardrails centrally to improve overall cloud security posture and reduce operational riskIntegrate configure deploy and manage common cloud services across 1AM networking loggingmonitoring operating systems and container platformsEmbed security into delivery pipelines by building and supporting ClCD and continuous testing capabilities eg Cloud Build GitOps tooling such as FluxCD HelmEnsure alignment and compliance with centrally defined Cloud Security Standards and contribute to auditability through evidence controls mapping and documentationOperate within agreed change management practices producing impact assessments where required and ensuring controlled traceable deploymentsMaintain highquality operational documentation runbooks and support procedures to enable sustainable operations and effective handoverWhat you need to have to succeed in this roleThe ideal candidate for this role will have the following experience and capabilitiesHandson demonstrable experience on Google Cloud Platform building and operating cloud services in production handson GCP experience is essentialStrong experience with core GCP services exposure to GKE BigQuery Cloud Build andor Cloud Run is highly desirableExpert understanding of cloud security principles and GCPspecific best practicesincluding 1AM design loggingmonitoring network security controls and workload securityStrong understanding of DevOpsSRE principles including reliability observability incident response supportability and engineering for resilienceProven experience implementing Infrastructure as Code using Terraform andor Config Connector including module design environments policydriven controls and automated deployment patternsExperience building and operating ClCD and related tooling eg Cloud Build GitOps FluxCD Helm with security controls embedded into delivery workflowsGood programmingscripting skills in at least one of Python Go Bash with a practical mindset for automation and operational toolingSecurity and compliance experience including auditability control evidence configuration management and the ability to work with complianceauditingmonitoring toolingStrong communication and stakeholder management skills with the ability to explain complex technical topics clearly to engineers and nonengineersA solid understanding of risk management and proven experience ensuring compliance with relevant regulatory and internal control requirementsEssential skillsBuilding secure and compliant GCP capabilities using automationfirst approachesImplementing and operating preventive controls and guardrails at scaleStrong troubleshooting capability across cloud infrastructure Kubernetescontainer platforms and ClCD pipelinesAbility to drive continuous improvement simplify operational processes and reduce toil through automationDesirable skillsGCP certifications eg Professional Cloud Security Engineer Professional Cloud DevOps Engineer Professional Cloud ArchitectExperience operating regulated workloads in a large enterprise environmentExperience with container security patterns and Kubernetes hardening approachesFamiliarity integrating security findings and policy checks into DevSecOps workflows and reportingSkillsMandatory Skills : GCP BigQuery, GCP Bigtable, GCP Build, GCP Cloud Architecture, GCP DevOps