Senior GCP(Google Cloud Platform) DevSecOps Engineer

Experis - ManpowerGroup; Sheffield; On-site; GBP 77,000 - 89,000; Full time

Job summary

Experis - ManpowerGroup is seeking a Senior GCP DevSecOps Engineer to join on a contract basis in Sheffield. Hybrid work arrangement: three days on-site per week with a focus on building and managing a secure GCP foundation platform.

You will automate cloud infrastructure using Terraform and Config Connector, strengthen security controls, and integrate CI/CD pipelines with Cloud Build, FluxCD, and Helm. Strong GCP expertise and security alignment are essential.

Qualifications

• Hands-on experience with GCP building and operating cloud services in production.
• Strong understanding of cloud security principles and best practices in GCP.

Responsibilities

• Build, deploy and manage components of the client's GCP foundation platform using Google Cloud services and automation-first engineering practices.
• Engineer repeatable platform and security capabilities using IaC (Terraform and/or Config Connector).
• Implement preventive security controls and guardrails to improve cloud security posture and reduce risk.
• Integrate, configure, deploy and manage IAM, networking, logging/monitoring, OS and container services.
• Embed security into delivery pipelines by building and supporting CI/CD and testing capabilities (Cloud Build, FluxCD, Helm).
• Ensure alignment with Cloud Security Standards and contribute to auditability with evidence and controls mapping.
• Maintain change management with impact assessments and controlled deployments.
• Develop and maintain operational runbooks and handover procedures.

Skills

GCP

Terraform

Config Connector

CI/CD

Security

Python/Go/Bash

GitOps

Tools

GKE

BigQuery

Cloud Build

Cloud Run

FluxCD

Helm

Job description

Role Title: Senior GCP(Google Cloud Platform) DevSecOps Engineer

Duration: contract to run until 30/12/2026

Location: Sheffield. Hybrid 3 days per week onsite

Rate: up to £473.80 p/d Umbrella inside IR35

Key responsibilities will include:

• Build, deploy and manage components of the client's GCP foundation platform using Google Cloud services (e.g., GKE, BigQuery, Cloud Build, Cloud Run) and automation-first engineering practices.
• Engineer repeatable platform and security capabilities using Infrastructure as Code (IaC), such as Terraform and/or Config Connector, following established engineering standards.
• Implement and enhance preventive security controls and guardrails centrally to improve overall cloud security posture and reduce operational risk.
• Integrate, configure, deploy and manage common cloud services across IAM, networking, logging/monitoring, operating systems and container platforms.
• Embed security into delivery pipelines by building and supporting CI/CD and continuous testing capabilities (e.g., Cloud Build, GitOps tooling such as FluxCD, Helm).
• Ensure alignment and compliance with centrally defined Cloud Security Standards and contribute to auditability through evidence, controls mapping and documentation.
• Operate within agreed change management practices, producing impact assessments where required and ensuring controlled, traceable deployments.
• Maintain high-quality operational documentation, runbooks and support procedures to enable sustainable operations and effective handover.

What you need to have to succeed in this role:

The ideal candidate for this role will have the following experience and capabilities:

• Hands-on, demonstrable experience on GCP building and operating cloud services in production (hands-on GCP experience is essential).
• Strong experience with core GCP services; exposure to GKE, BigQuery, Cloud Build and/or Cloud Run is highly desirable.
• Expert understanding of cloud security principles and GCP-specific best practices, including IAM design, logging/monitoring, network security controls and workload security.
• Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience.
• Proven experience implementing Infrastructure as code using Terraform (and/or Config Connector), including module design, environments, policy-driven controls and automated deployment patterns.
• Experience building and operation CI/CD and related tooling (e.g., Cloud Build, GitOps, FluxCD, Helm) with security controls embedded into delivery workflows.
• Good programming/scripting skills in at least one of: Python, Go, Bash, with practical mindset for automation and operational tooling.
• Security and compliance experience, including auditability, control evidence, configuration management and the ability to work with compliance/auditing/monitoring tooling.
• Strong communication and stakeholder management skills, with the ability ot explain complex technical topics clearly to engineers and non-engineers.
• A solid understanding of risk management and proven experience ensuring compliance with relevant regulatory and internal control requirements.

Essential skills:

• Building secure and compliant GCP capabilities using automation-first approaches.
• Implementing and operating preventive controls and guardrails at scale.
• Strong troubleshooting capability across cloud infrastructure, Kubernetes/container platforms and CI/CD pipelines.
• Ability to drive continuous improvement, simplify operational processes and resuce oil through automation.

Desirable skills:

• GCP certifications (e.g., Professional Cloud Security Engineer, Professional Cloud DevOps Engineer, Professional Cloud Architect).
• Experience operation regulated workloads in a large enterprise environment.
• Experience with container security patterns and Kubernetes hardening approaches.
• Familiarity integrating security findings and policy checks into DevSecOps workflows and reporting.

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.