Senior Cloud DevSecOps Engineer – GCP Compliance

About the role

We are looking for a Senior Cloud DevSecOps Engineer to lead our Google Cloud compliance automation initiatives. The role focuses on building automated compliance checks for Kubernetes and overall cloud security posture using Google Cloud Security Command Center and Compliance Manager.

Key responsibilities

• Develop automated compliance checks using Common Expression Language (CEL) within SCC and Compliance Manager.
• Translate CIS Benchmarks and NIST 800‑53 controls into enforceable validation logic for GCP resources.
• Evaluate and secure GKE/Kubernetes environments, including workload permissions, RBAC, and policy compliance.
• Identify compliance gaps and implement automated policy checks across IAM, logging, networking, and cluster configurations.
• Support Terraform, CI/CD pipelines, and broader cloud security automation initiatives.

Required profile

• 7+ years of cloud/infrastructure engineering experience.
• 3+ years of hands‑on experience with Google Cloud Platform.
• Strong background in securing GKE/Kubernetes environments and GCP IAM.
• Experience with policy‑as‑code, compliance automation, and scripting/automation.

Required skills

• Google Cloud Platform (GCP)
• Google Kubernetes Engine (GKE) and Kubernetes
• Cloud Security Command Center (SCC) and Compliance Manager
• Common Expression Language (CEL)
• Policy‑as‑Code / Compliance‑as‑Code
• Terraform
• CI/CD pipelines
• IAM, logging, networking configuration

What we offer

• Exciting projects at the forefront of digital transformation.
• Collaborative, diverse team environment with global opportunities.
• Flexible work schedules promoting work‑life balance.
• Professional development through training, certifications, and English classes.
• Competitive salary, family medical insurance, extended paternity leave, performance and referral bonuses.