Senior GCP Cloud Security Architect

Starling; England; Hybrid; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Private Medical Insurance

Pension scheme

Cycle to Work

Life insurance

Job summary

Engine by Starling is seeking a Senior Cloud Security Engineer (GCP) in a hybrid role based in London. You will architect and secure Google Cloud platforms, automate controls, and lead incident response across multiple teams to protect data and applications.

The role emphasizes hands-on security engineering, IaC, and collaboration with infrastructure and security teams to maintain strict PCI DSS/3DS compliance and secure software supply chains.

Qualifications

• Deep expertise in GCP security architecture with proven track record.
• Experience configuring GCP landing zones, org policies and VPC Service Controls.
• Strong knowledge of GCP IAM and its limitations.
• Hands-on with GKE, Compute Engine, Shared VPC and Cloud SQL on GCP.
• Kubernetes security, including GKE and mesh security, RBAC implementation.

Responsibilities

• Define our Google Cloud security architecture with stakeholders.
• Design, document, and build secure infrastructure on GCP using IaC.
• Ensure secure user access, authentication and authorization mechanisms.
• Automate security controls in GCP to demonstrate continuous compliance.
• Drive security deployments across growing environments.
• Lead incident response and remediation of security breaches.
• Support DevSecOps culture across technology teams.

Skills

GCP security

GKE security

Terraform

RBAC

CI/CD scripting

Tools

Terraform

Cloud IAM

Job description

Engine by Starling is seeking a Senior Cloud Security Engineer (GCP) in a hybrid role based in London. You will architect and secure Google Cloud platforms, automate controls, and lead incident response across multiple teams to protect data and applications.

The role emphasizes hands-on security engineering, IaC, and collaboration with infrastructure and security teams to maintain strict PCI DSS/3DS compliance and secure software supply chains.