Senior DevSecOps Engineer: Secure Cloud & Kubernetes Expert

Yapily; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Benefits offered by this job

Hybrid working

Private medical insurance

25 days holiday + bank holidays

Learning & development budget

Cycle to work scheme

Team socials

Job summary

Yapily is looking for a Senior DevSecOps Engineer to embed security across the SDLC for a high-availability, multi-tenant platform on GCP and Kubernetes. You will automate compliance, harden cloud and CI/CD practices, and enable safe, scalable deployments across feature teams.

Ideal candidates will have hands-on experience with GCP IAM, network security, Kubernetes security, and IaC tooling, plus a track record of building secure pipelines and guardrails in modern fintech environments.

Qualifications

• Deep experience designing, managing, and securing high-availability cloud infra (GCP).
• Proficient in reviewing APIs and guiding engineers to secure interfaces.
• Expert Kubernetes security including network policies, runtime security, and secrets.
• Proven IaC skills with Terraform or OpenTofu and secure pipelines.
• Hands-on with security tooling such as CSPM/CWPP/CNAPP suites.
• Automation and scripting in Python, Golang or Shell to drive security workflows.
• Ability to build secure GitLab CI or GitHub Actions pipelines with checks.

Responsibilities

• Own security tooling integration across environments and CI/CD pipelines.
• Design and enforce automated security guardrails across cloud estate.
• Hardening Google Cloud Platform IAM, network, and config management.
• Translate compliance requirements into automated infrastructure practices.
• Automate vulnerability management and remediation with eng teams.
• Create golden-path templates for secure service deployment.

Skills

Cloud security design

API security

Kubernetes security (GKE)

IaC (Terraform/OpenTofu)

Security tooling

Automation & scripting

CI/CD guardrails

Tools

Terraform

OpenTofu

Aqua Security

Falco

Prisma Cloud

Job description

Yapily is looking for a Senior DevSecOps Engineer to embed security across the SDLC for a high-availability, multi-tenant platform on GCP and Kubernetes. You will automate compliance, harden cloud and CI/CD practices, and enable safe, scalable deployments across feature teams.

Ideal candidates will have hands-on experience with GCP IAM, network security, Kubernetes security, and IaC tooling, plus a track record of building secure pipelines and guardrails in modern fintech environments.