Senior GCP Security Engineer: Cloud Security & IAM Lead

Starling; Greater London; On-site; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Private Medical Insurance

Pension scheme

Life insurance

Cycle to Work

EV leasing

Perkbox membership

Refer a friend scheme

Family-friendly policies

Job summary

Engine by Starling is seeking an experienced Senior GCP Security Engineer to own the security foundations of our Google Cloud Platform environment. You will design and automate secure controls, collaborate with security and infrastructure teams, and drive compliance across multiple environments.

You will lead the secure deployment of cloud infrastructure, manage IAM and access controls, and contribute to a DevSecOps culture with emphasis on high-assurance security practices.

Qualifications

• Mature understanding of cloud security architecture with deep GCP expertise.
• Experience creating a GCP landing zone, organisation policies and VPC Service Controls.
• Deep understanding of GCP IAM and its limitations.
• Experience with Kubernetes security, RBAC and GKE; container security.
• Experience with Infrastructure as Code (Terraform).
• Strong programming skills in Python or Go for automation.

Responsibilities

• Define our Google Cloud security architecture with stakeholders.
• Design, document, build and maintain secure, scalable GCP infrastructure using IaC.
• Ensure secure access, authentication and authorization across systems.
• Automate security controls in GCP and demonstrate continuous compliance (PCI DSS, 3DS).
• Drive security deployments across growing environments.
• Lead incident response, investigations and remediation of breaches.
• Support security awareness and DevSecOps culture across teams.

Skills

GCP security architecture

GCP IAM

GKE security

Terraform

Kubernetes security

Security incident response

Cloud security posture

Python/Go scripting

Tools

Terraform

GKE

Artifact Registry

Cloud KMS

Job description

Engine by Starling is seeking an experienced Senior GCP Security Engineer to own the security foundations of our Google Cloud Platform environment. You will design and automate secure controls, collaborate with security and infrastructure teams, and drive compliance across multiple environments.

You will lead the secure deployment of cloud infrastructure, manage IAM and access controls, and contribute to a DevSecOps culture with emphasis on high-assurance security practices.