Senior Cloud DevSecOp Engineer IRC303115

About the role

We are looking for a Senior GCP Compliance / DevSecOps Engineer to lead the automation of cloud security and compliance on Google Cloud. You will work in a collaborative, team‑based environment to translate CIS Benchmarks and NIST controls into automated validation logic.

Key responsibilities

• Develop automated compliance checks using Common Expression Language (CEL) within Security Command Center (SCC) and Compliance Manager.
• Translate CIS Benchmarks and NIST 800‑53 controls into enforceable cloud validation logic.
• Evaluate and secure GKE/Kubernetes environments, including workload permissions, RBAC, and policy compliance.
• Identify compliance gaps and implement automated policy checks across IAM, logging, networking, and cluster configurations.
• Support Terraform, CI/CD pipelines, and broader cloud security automation initiatives.

Required profile

• 7+ years of cloud/infrastructure engineering experience.
• 3+ years of hands‑on GCP experience.
• Strong background in securing GKE/Kubernetes environments and GCP IAM.
• Proven ability to translate compliance requirements into technical validation checks.

Required skills

• Google Cloud Platform (GCP)
• Google Kubernetes Engine (GKE) and Kubernetes
• Security Command Center (SCC)
• Common Expression Language (CEL)
• Policy‑as‑Code / Compliance‑as‑Code
• CIS Benchmarks, NIST 800‑53
• Terraform
• CI/CD pipelines
• Scripting and automation (e.g., Python, Bash)

What we offer

• Exciting projects with cutting‑edge technologies.
• Collaborative, flexible work environment.
• Work‑life balance with flexible schedules.
• Professional development, certifications, and English classes.
• Competitive salary, family medical insurance, extended paternity leave, performance and referral bonuses.