Sovereign Cloud Platform Engineer (GCP/GKE, Air-Gapped)

Zaizi Ltd; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Competitive pay

Pension with incremental employer rate

Life Assurance

Hybrid working

Study leave and certifications

Personal learning budget (£500)

Job summary

Zaizi Ltd is seeking a Senior Cloud Platform Engineer to design, deploy, and maintain sovereign cloud infrastructure for sensitive national security operations. You will work with GCP, Kubernetes, and air-gapped platforms (GDC air-gapped, GKE Enterprise) to support tactical edge analytics and disconnected workloads.

Key responsibilities include IaC for sovereign environments, secure Kubernetes orchestration, high-assurance security architecture, and DevSecOps with policy enforcement across

Qualifications

• Active UK SC Clearance or DV eligibility is required.
• 3+ years of production experience with Google Cloud Platform (GCP).
• Expertise in Terraform for declarative infrastructure management.
• Deep understanding of GCP networking and security controls.
• Experience with GKE / GKE Enterprise and air-gapped deployments.
• Experience with container security, policy enforcement, and CI/CD security.

Responsibilities

• Design, build, and maintain sovereign GCP environments and Landing Zones using IaC.
• Manage, scale, and secure GKE/GKE Enterprise clusters in air-gapped environments.
• Implement Zero-Trust network topologies and security controls.
• Operate air-gapped and edge deployments with offline artifact handling.
• Develop secure CI/CD pipelines with policy enforcement.

Skills

GCP

Kubernetes

Terraform

Ansible

GKE / GKE Enterprise

Zero-Trust

Air-gapped deployments

Policy-as-Code

Vault / GCP KMS

Tools

Vault

GCP KMS

Istio

OPA/Gatekeeper

Kyverno

Job description

Zaizi Ltd is seeking a Senior Cloud Platform Engineer to design, deploy, and maintain sovereign cloud infrastructure for sensitive national security operations. You will work with GCP, Kubernetes, and air-gapped platforms (GDC air-gapped, GKE Enterprise) to support tactical edge analytics and disconnected workloads.

Key responsibilities include IaC for sovereign environments, secure Kubernetes orchestration, high-assurance security architecture, and DevSecOps with policy enforcement across