Senior Cloud Engineer

SR2; City Of London; Hybrid; GBP 111,000 - 120,000; Full time

Job summary

SR2 is seeking a Senior Cloud Engineer to drive a Google Cloud transformation for central government. You will assess the existing GCP estate, validate landing-zone architecture, and develop proofs-of-concept across governance, security, and automation.

Working with the Lead Cloud Architect, you will ensure the target state is secure, scalable and ready for implementation, delivering automated tooling and robust IAM and policy controls in a highly regulated environment.

Qualifications

• Active SC clearance required.
• Extensive enterprise GCP engineering experience.
• Strong knowledge of IAM, policies, and audit logging.
• Advanced Terraform and IaC capability.
• Experience with Google Cloud Fabric or similar enterprise landing-zone frameworks.
• Experience delivering secure cloud platforms in regulated environments.

Responsibilities

• Assess the existing GCP organisation, projects, IAM, security controls.
• Validate target landing-zone architecture and governance model.
• Review organisation policies and role-based access controls.
• Evaluate audit logging, Security Command Center and wider cloud security controls.
• Develop proof-of-concepts for landing zones, project vending and governance capabilities.
• Design Infrastructure as Code using Terraform and Google Cloud Fabric.
• Support CI/CD automation using GitHub Actions or comparable tooling.
• Identify technical risks, dependencies and implementation requirements, providing clear recommendations for transition and delivery.

Skills

GCP engineering

Terraform IaC

CI/CD

GitHub Actions

Security & governance

IAM & policies

Tools

Terraform

GitHub Actions

Security Command Center

Job description

Senior Cloud Engineer - GCP - SC Cleared

Outside IR35: £600-£650 per day
Hybrid - 2-4 days per month in London
ASAP - long-term engagement

We are looking for an experienced Senior Cloud Engineer to join a major Google Cloud transformation within central government. The role will help shape the future of an enterprise-scale GCP estate by assessing the current platform, validating the target landing-zone architecture and developing proof-of-concepts across governance, security and automation. Working closely with the Lead Cloud Architect, you will ensure the proposed target state is secure, scalable and ready for implementation.

Role responsibilities

• Assess the existing GCP organisation, projects, IAM, security controls and platform configuration.
• Provide technical input into the target landing-zone architecture and governance model.
• Review organisation policies, project governance and role-based access controls.
• Evaluate audit logging, Security Command Center and wider cloud security controls.
• Develop proof-of-concepts for landing zones, project vending and governance capabilities.
• Design Infrastructure as Code using Terraform and Google Cloud Fabric.
• Support CI/CD automation using GitHub Actions or comparable tooling.
• Identify technical risks, dependencies and implementation requirements, providing clear recommendations for transition and delivery.

Key experience and requirements

• Active SC clearance.
• Extensive enterprise Google Cloud Platform engineering experience, including organisation and project administration at scale.
• Strong knowledge of GCP IAM, organisation policies, audit logging and Security Command Center.
• Advanced Terraform and Infrastructure as Code capability.
• Experience using Google Cloud Fabric or comparable enterprise landing-zone frameworks.
• Experience designing or implementing GCP landing zones and automated project-vending capabilities.
• Strong CI/CD knowledge, ideally including GitHub Actions.
• Experience delivering secure cloud platforms within UK government, the wider public sector or another highly regulated environment.