Senior DevSecOps Engineer: Secure Cloud, Kubernetes & CI/CD

Dormont Manufacturing Co; United Kingdom; Hybrid; GBP 120,000 - 160,000; Full time

Job summary

Yapily is hiring a Senior DevSecOps Engineer to embed security across the SDLC for our scalable, multi-tenant platform built on GCP and Kubernetes.

You will own security tooling, automate compliance, and harden IAM, networks, and deployment pipelines while collaborating with engineering and governance teams. This role emphasizes proactive, automated security at scale and the delivery of secure by default infrastructure.

Qualifications

• Deep practical experience securing high-availability infrastructure in GCP.
• Proficient in reviewing and upskilling engineers on secure API interfaces.
• Expert knowledge in deploying and hardening Kubernetes (GKE) clusters and network policies.
• Solid skills in writing, securing, and testing Terraform or OpenTofu configuration.
• Hands-on experience deploying and managing security tooling (Aqua, Falco, Prisma Cloud).
• Proficient in Python, Go, or Shell for security automation.
• Proven ability to build secure CI/CD pipelines with integrated security checks.

Responsibilities

• Own Security Tooling in our environments and CI/CD pipelines.
• Design, implement, and enforce automated security guardrails and policies.
• Hardening GCP IAM, network security, and resource configuration management.
• Translate compliance requirements into automated, verifiable deployment practices.
• Automate vulnerability management and patch workflows with engineering teams.
• Create and maintain secure deployment templates for feature teams.
• Contribute to security incident response and resolution.

Skills

Cloud Architecture & Security

API security

Kubernetes Security

IaC (Terraform/OpenTofu)

Security Tooling

Automation & Scripting

CI/CD Guardrails

Tools

Aqua Security

Falco

Prisma Cloud

OpenTofu/Terraform

Job description

Yapily is hiring a Senior DevSecOps Engineer to embed security across the SDLC for our scalable, multi-tenant platform built on GCP and Kubernetes.

You will own security tooling, automate compliance, and harden IAM, networks, and deployment pipelines while collaborating with engineering and governance teams. This role emphasizes proactive, automated security at scale and the delivery of secure by default infrastructure.