Senior DevSecOps Engineer — Hybrid Cloud Security & Automation

Yapily; City Of London; Hybrid; GBP 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid Working

Nomad Working

Family First

Private Medical Insurance

Mental Health Support

Learning Budget

Cycle to Work

Job summary

Yapily is seeking a Senior DevSecOps Engineer to embed security across the SDLC for a multi-tenant GCP/Kubernetes platform. You will automate compliance, secure infrastructure, and drive secure deployment patterns.

You will partner with compliance teams and engineers to remediate vulnerabilities, build golden-path deployment templates, and enable teams to ship fast without compromising security.

Qualifications

• Deep, practical experience designing, managing, and securing high-availability infrastructure within GCP.
• Expert knowledge of deploying, operating, and hardening Kubernetes (GKE) clusters.
• Proficient in configuring infrastructure as code and security tooling across CI/CD.

Responsibilities

• Own Security Tooling: selecting, integrating, and maintaining security tooling in environments and CI/CD pipelines.
• Engineering Security Guardrails: design, implement, enforce automated guardrails and policies.
• GCP Security Focus: harden IAM, networking, and resource configuration in Google Cloud.
• Compliance Automation: translate requirements into automated, verifiable infra and deployment practices.
• Vulnerability & Patch Management: automate end-to-end remediation with engineering teams.

Skills

Cloud Security

API security

Kubernetes security

Infrastructure as Code

Security tooling

Automation scripting

CI/CD guardrails

Tools

Aqua Security

Falco

Prisma Cloud

Terraform

OpenTofu

Job description

Yapily is seeking a Senior DevSecOps Engineer to embed security across the SDLC for a multi-tenant GCP/Kubernetes platform. You will automate compliance, secure infrastructure, and drive secure deployment patterns.

You will partner with compliance teams and engineers to remediate vulnerabilities, build golden-path deployment templates, and enable teams to ship fast without compromising security.