Senior GCP Security Architect & DevSecOps Leader

Jobtailor; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Jobtailor seeks a seasoned Cloud Security Engineer to design and maintain secure, scalable GCP infrastructure using Infrastructure as Code. You will own cloud security architecture, identity and access controls, and continuous compliance.

Lead incident response, threat modelling and architecture reviews, and collaborate with Information Security, Infrastructure and Engineering teams to deploy secure, auditable solutions. Strong GCP/Kubernetes security and Terraform skills are essential.

Qualifications

• Extensive experience in Google Cloud security architecture.
• Proven track record in GCP landing zone design and governance.
• Deep knowledge of GCP IAM and its limitations.
• Experience with IaC tooling, especially Terraform.
• Strong incident response, risk assessment and threat modelling skills.
• Familiarity with PCI DSS, NIST, SOC 2, ISO 27001 standards.

Responsibilities

• Define and implement GCP security architecture and IAM controls.
• Design, document, and maintain secure GCP infrastructure using IaC.
• Lead incident response and remediation efforts.
• Assess risks, conduct threat modelling and architecture reviews.
• Coordinate security with Information Security, Infra and Eng teams.
• Ensure PCI DSS readiness and ongoing security compliance.

Skills

GCP security

IAM management

Kubernetes security

Threat modelling

Incident response

Security auditing

Education

CISSP

CCSP

CISM

GCP Professional Cloud Security Engineer

AWS Security Specialty

Tools

Terraform

GKE

Cloud KMS

Artifact Registry

Binary Authorization

Security Command Center

VPC Service Controls

Shared VPC

RBAC

Cloud Logging

Monitoring

Job description

Jobtailor seeks a seasoned Cloud Security Engineer to design and maintain secure, scalable GCP infrastructure using Infrastructure as Code. You will own cloud security architecture, identity and access controls, and continuous compliance.

Lead incident response, threat modelling and architecture reviews, and collaborate with Information Security, Infrastructure and Engineering teams to deploy secure, auditable solutions. Strong GCP/Kubernetes security and Terraform skills are essential.