GCP DevSecOps Engineer

Company Introduction

We have an exciting opportunity now available with one of our sector-leading financial services clients! They are currently looking for a skilled GCP DevSecOps Engineer to join their team for a six-month contract.

Job Responsibilities/Objectives

• Build, deploy and manage components of the GCP foundation platform using Google Cloud services (eg, GKE, BigQuery, Cloud Build, Cloud Run) and automation-first engineering practices.
• Engineer repeatable platform and security capabilities using Infrastructure as Code (IaC), such as Terraform and/or Config Connector, following established engineering standards.
• Implement and enhance preventive security controls and guardrails centrally to improve overall cloud security posture and reduce operational risk.
• Integrate, configure, deploy and manage common cloud services across IAM, networking, logging/monitoring, operating systems and container platforms.
• Embed security into delivery pipelines by building and supporting CI/CD and continuous testing capabilities (eg, Cloud Build, GitOps tooling such as FluxCD, Helm).
• Ensure alignment and compliance with centrally defined Cloud Security Standards and contribute to auditability through evidence, controls mapping and documentation.
• Operate within agreed change management practices, producing impact assessments where required and ensuring controlled, traceable deployments.
• Maintain high-quality operational documentation, runbooks and support procedures to enable sustainable operations and effective handover.

Required Skills/Experience

• Hands-on, demonstrable experience on GCP building and operating cloud services in production (hands-on GCP experience is essential).
• Strong experience with core GCP services; exposure to GKE, BigQuery, Cloud Build and/or Cloud Run is highly desirable.
• Expert understanding of cloud security principles and GCP-specific best practices, including IAM design, logging/monitoring, network security controls and workload security.
• Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience.
• Proven experience implementing Infrastructure as code using Terraform (and/or Config Connector), including module design, environments, policy-driven controls and automated deployment patterns.
• Experience building and operation CI/CD and related tooling (eg, Cloud Build, GitOps, FluxCD, Helm) with security controls Embedded into delivery workflows.
• Good programming/Scripting skills in at least one of: Python, Go, Bash, with practical mindset for automation and operational tooling.
• Security and compliance experience, including auditability, control evidence, configuration management and the ability to work with compliance/auditing/monitoring tooling.
• Strong communication and stakeholder management skills, with the ability ot explain complex technical topics clearly to engineers and non-engineers.
• A solid understanding of risk management and proven experience ensuring compliance with relevant regulatory and internal control requirements.

Desirable Skills/Experience

• GCP certifications (eg, Professional Cloud Security Engineer, Professional Cloud DevOps Engineer, Professional Cloud Architect).
• Experience operation regulated workloads in a large enterprise environment.
• Experience with container security patterns and Kubernetes hardening approaches.
• Familiarity integrating security findings and policy checks into DevSecOps workflows and reporting.