GCP DevSecOps Engineer: Cloud Security & Automation

Undisclosed; Sheffield; On-site; GBP 108,000 - 132,000; Full time

Job summary

Undisclosed is seeking a hands‑on Cloud Security/DevOps engineer to build, deploy and manage components of a GCP foundation platform using Google Cloud services (GKE, BigQuery, Cloud Build, Cloud Run) in production.

You will implement IaC with Terraform and Config Connector, embed security controls, support CI/CD with Cloud Build, FluxCD and Helm, and maintain runbooks and audit trails in line with Cloud Security Standards.

Qualifications

• Hands-on GCP production experience with core services (GKE, BigQuery, Cloud Build, Cloud Run).
• Strong knowledge of security practices, IAM design and workload security.
• Experience with Terraform and policy-driven automation.
• Proficiency in CI/CD with security controls and GitOps tooling.
• Ability to communicate complex topics clearly to engineers and non-engineers.

Responsibilities

• Build, deploy and manage components of the client’s GCP platform using Google Cloud services.
• Engineer IaC with Terraform and Config Connector following standards.
• Implement preventive security controls and guardrails to reduce risk.
• Integrate and manage common cloud services across IAM, networking, logging/monitoring.
• Embed security into delivery pipelines with CI/CD tooling (Cloud Build, FluxCD, Helm).
• Ensure alignment with Cloud Security Standards and provide audit evidence/docs.
• Operate changes with traceability and maintain runbooks and handover procedures.

Skills

GCP expertise

DevOps / SRE

Python/Go/Bash

Security & compliance

CI/CD tooling

Communication

Risk management

Tools

Terraform

Config Connector

Cloud Build

FluxCD

Helm

Kubernetes

Job description

Undisclosed is seeking a hands‑on Cloud Security/DevOps engineer to build, deploy and manage components of a GCP foundation platform using Google Cloud services (GKE, BigQuery, Cloud Build, Cloud Run) in production.

You will implement IaC with Terraform and Config Connector, embed security controls, support CI/CD with Cloud Build, FluxCD and Helm, and maintain runbooks and audit trails in line with Cloud Security Standards.