DevSecOps Engineer

Undisclosed; Sheffield; On-site; GBP 108,000 - 132,000; Full time

Job summary

Undisclosed is seeking a hands‑on Cloud Security/DevOps engineer to build, deploy and manage components of a GCP foundation platform using Google Cloud services (GKE, BigQuery, Cloud Build, Cloud Run) in production.

You will implement IaC with Terraform and Config Connector, embed security controls, support CI/CD with Cloud Build, FluxCD and Helm, and maintain runbooks and audit trails in line with Cloud Security Standards.

Qualifications

• Hands-on GCP production experience with core services (GKE, BigQuery, Cloud Build, Cloud Run).
• Strong knowledge of security practices, IAM design and workload security.
• Experience with Terraform and policy-driven automation.
• Proficiency in CI/CD with security controls and GitOps tooling.
• Ability to communicate complex topics clearly to engineers and non-engineers.

Responsibilities

• Build, deploy and manage components of the client’s GCP platform using Google Cloud services.
• Engineer IaC with Terraform and Config Connector following standards.
• Implement preventive security controls and guardrails to reduce risk.
• Integrate and manage common cloud services across IAM, networking, logging/monitoring.
• Embed security into delivery pipelines with CI/CD tooling (Cloud Build, FluxCD, Helm).
• Ensure alignment with Cloud Security Standards and provide audit evidence/docs.
• Operate changes with traceability and maintain runbooks and handover procedures.

Skills

GCP expertise

DevOps / SRE

Python/Go/Bash

Security & compliance

CI/CD tooling

Communication

Risk management

Tools

Terraform

Config Connector

Cloud Build

FluxCD

Helm

Kubernetes

Job description

Duration: contract to run until 31/07/2027

Rate: up to £473.80 p/d Umbrellainside IR35

Key responsibilities will include:

• Build, deploy and manage components of the client’s GCP foundation platform using Google Cloud services (e.g., GKE, BigQuery, Cloud Build, Cloud Run) and automation-first engineering practices.
• Engineer repeatable platform and security capabilities using Infrastructure as Code (IaC), such as Terraform and/or Config Connector, following established engineering standards.
• Implement and enhance preventive security controls and guardrails centrally to improve overall cloud security posture and reduce operational risk.
• Integrate, configure, deploy and manage common cloud services across IAM, networking, logging/monitoring, operating systems and container platforms.
• Embed security into delivery pipelines by building and supporting CI/CD and continuous testing capabilities (e.g., Cloud Build, GitOps tooling such as FluxCD, Helm).
• Ensure alignment and compliance with centrally defined Cloud Security Standards and contribute to auditability through evidence, controls mapping and documentation.
• Operate within agreed change management practices, producing impact assessments where required and ensuring controlled, traceable deployments.
• Maintain high-quality operational documentation, runbooks and support procedures to enable sustainable operations and effective handover.
• What you need to have to succeed in this role:
• The ideal candidate for this role will have the following experience and capabilities:
• Hands‑on, demonstrable experience on GCP building and operating cloud services in production (hands‑on GCP experience is essential).
• Strong experience with core GCP services; exposure to GKE, BigQuery, Cloud Build and/or Cloud Run is highly desirable.
• Expert understanding of cloud security principles and GCP‑specific best practices, including IAM design, logging/monitoring, network security controls and workload security.
• Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience.
• Proven experience implementing Infrastructure as code using Terraform (and/or Config Connector), including module design, environments, policy‑driven controls and automated deployment patterns.
• Experience building and operation CI/CD and related tooling (e.g., Cloud Build, GitOps, FluxCD, Helm) with security controls embedded into delivery workflows.
• Good programming/scripting skills in at least one of: Python, Go, Bash, with practical mindset for automation and operational tooling.
• Security and compliance experience, including auditability, control evidence, configuration management and the ability to work with compliance/auditing/monitoring tooling.
• Strong communication and stakeholder management skills, with the ability ot explain complex technical topics clearly to engineers and non‑engineers.
• A solid understanding of risk management and proven experience ensuring compliance with relevant regulatory and internal control requirements.
• Essential skills:
• Building secure and compliant GCP capabilities using automation‑first approaches.
• Implementing and operating preventive controls and guardrails at scale.
• Strong troubleshooting capability across cloud infrastructure, Kubernetes/container platforms and CI/CD pipelines.
• Ability to drive continuous improvement, simplify operational processes and resuce oil through automation.
• GCP certifications (e.g., Professional Cloud Security Engineer, Professional Cloud DevOps Engineer, Professional Cloud Architect).
• Experience operation regulated workloads in a large enterprise environment.
• Experience with container security patterns and Kubernetes hardening approaches.
• Familiarity integrating security findings and policy checks into DevSecOps workflows and reporting.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!