GCP DevSecOps Engineer

Description

Join the Global Cloud Services – Google Cloud Security & Compliance team to lead Cloud Security Posture Management initiatives using cutting-edge technology and AI supporting tools. Act as a trusted advisor and hands-on contributor to secure the GCP estate of a global financial services organization, maintain ongoing compliance, and improve cloud adoption and customer satisfaction.

What you’ll do

• Build, deploy, and manage GCP foundation platform applications using Google Cloud products such as BigQuery, GKE, Cloud Build, and Cloud Run, with Python.
• Engineer GCP foundation platform solutions using Infrastructure as Code methods, including Terraform and Config Connector.
• Implement centralized preventive security solutions to improve overall security posture.
• Integrate, configure, deploy, and manage common cloud services covering IAM, networking, logging, operating systems, and containers.
• Ensure compliance with centrally defined Cloud Security Standards.
• Ensure compliance with operational risk standards, including network, firewall, OS, logging, monitoring, availability, and resiliency requirements.
• Build and support continuous integration, continuous delivery, and continuous testing activities.
• Implement change-management practices in line with central standards.
• Update support and operational documentation as required.

Requirements

• Experience building and managing a range of services in Google Cloud Platform; expertise in GKE, BigQuery, Cloud Build, or Cloud Run is a plus.
• Expert-level understanding of cloud security and Google Cloud-specific best practices.
• Strong understanding of DevOps and SRE principles, Infrastructure as Code concepts, and techniques.
• Hands-on Terraform experience and strong understanding of CI/CD and related tools, including Cloud Build, Flux CD, and Helm.
• Excellent skills in at least one programming language: Python, Go, or Bash.
• Security and compliance experience, including IAM, cloud compliance, auditing, monitoring tools, automation, and configuration management.
• Track record of continuous improvement and understanding of mechanisms required to implement change successfully.
• Excellent written and spoken communication skills, with the ability to articulate complex information for varied audiences.
• Comprehensive understanding of risk management and proven experience ensuring compliance with relevant regulatory processes.