Senior GCP DevOps Engineer

Sonatype Inc; Hyderabad; On-site; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Parental leave

Diversity and inclusion

Flexible working

Job summary

Sonatype is seeking a GCP DevOps Engineer to design, automate, and scale our engineering platform on Google Cloud Platform from Hyderabad. You will lead infrastructure modernization, CI/CD automation, and security improvements across microservices and cloud-native apps.

You will mentor teams, drive reliability practices, and help shape DevSecOps maturity while partnering with engineering to shorten delivery cycles and improve developer experience.

Qualifications

• 6+ years in DevOps/platform engineering or SRE roles supporting modern software delivery.
• Deep hands-on experience with Google Cloud Platform services (compute, IAM, storage, network, monitoring, security).
• Experience designing CI/CD pipelines for multiple stacks and deployment patterns.
• Infrastructure as Code using Terraform or equivalent.
• Proficiency with containers and orchestration (Docker, Kubernetes; GKE preferred).
• Automation scripting with Python, Bash, or similar languages.
• Good knowledge of sourcing, package management, and release strategies.
• Observability, logging, alerting, dashboards for production systems.

Responsibilities

• Design, implement, and evolve GCP-based infrastructure as code and deployment automation.
• Build and maintain scalable CI/CD pipelines across apps and platforms.
• Administer and optimize GCP delivery workflows and access controls.
• Collaborate with engineering to improve build, release, and deployment processes.
• Strengthen platform security with secrets, policy enforcement, and vulnerability scanning.
• Manage containerized environments with Kubernetes and GKE.
• Drive reliability engineering practices including incident response and RCA.
• Standardize templates and platform patterns to boost developer productivity.
• Mentor engineers and provide technical leadership on GCP architecture and DevSecOps.
• Promote best practices for observability and operational excellence.

Skills

GCP

DevOps

Terraform

Cloud Build

Jenkins

GitHub Actions

Kubernetes

Docker

Python scripting

Security best practices

Tools

Terraform

Deployment Manager

Jenkins

Cloud Build

GitHub Actions

Docker

Kubernetes

Helm

Artifact Registry

Job description

Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.

As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.

More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.

At Sonatype, we empower developers with best-in-class tools to build secure, high-quality software at scale. Our mission is to create a world where software is always secure and developers can innovate without fear. Trusted by thousands of organizations, including Fortune 500 companies, we are pioneers in software supply chain management, open-source security, and DevSecOps.

We are looking for a GCP DevOps Engineer to help us shape the future of secure software development. If you love solving complex problems, working with cloud-native platforms, and mentoring engineering teams, we would love to hear from you.

As a GCP DevOps Engineer, you will play a critical role in designing, automating, and scaling Sonatype's engineering platform and delivery systems on GCP. You will lead infrastructure and CI/CD modernization, improve reliability and security, and guide teams on platform engineering and DevOps best practices.

Key Responsibilities

• 6+ years of design, implement, and evolve GCP-based infrastructure using Infrastructure as Code with Terraform and Google Cloud deployment automation patterns.
• Build and maintain scalable CI/CD pipelines using Cloud Build, GitHub Actions, Jenkins, or equivalent platforms for application, infrastructure, and platform workloads.
• Administer and optimize GCP delivery workflows including Cloud Build triggers, Artifact Registry, source integrations, deployment approvals, and service account access patterns.
• Partner with engineering teams to improve build, release, and deployment workflows across microservices and cloud-native applications.
• Implement robust observability across systems using Google Cloud Operations Suite, Cloud Logging, Cloud Monitoring, and related telemetry tooling.
• Strengthen platform security by integrating secrets management, policy enforcement, vulnerability scanning, and least-privilege access controls.
• Manage and optimize containerized environments using Kubernetes, Helm, and Google Kubernetes Engine (GKE).
• Drive reliability engineering practices including incident response, root cause analysis, SLO thinking, and automated remediation where appropriate.
• Standardize reusable templates, modules, and platform patterns that improve developer productivity and consistency.
• Mentor engineers and provide technical leadership on GCP architecture, deployment automation, release governance, and DevSecOps practices.

What We Are Looking For

• 6+ years of strong experience in DevOps, platform engineering, or site reliability engineering roles supporting modern software delivery.
• Deep hands‑on expertise with Google Cloud Platform, including compute, networking, IAM, storage, monitoring, and security services.
• Strong experience with GCP-native or integrated CI/CD pipeline design for multiple application stacks and deployment patterns.
• Experience with Infrastructure as Code using Terraform, Deployment Manager alternatives, or equivalent automation frameworks.
• Proficiency with containers and orchestration platforms such as Docker and Kubernetes, preferably with GKE experience.
• Experience with scripting and automation using Python, Bash, PowerShell, or similar languages.
• Solid understanding of source control workflows, package management, artifact promotion, and release strategies.
• Experience implementing observability, logging, alerting, and operational dashboards for production systems.
• Strong understanding of cloud security, IAM, secrets management, compliance controls, and secure software delivery practices.
• Excellent collaboration and communication skills, with the ability to influence technical direction across teams.

Nice to Have

• Experience with GitHub, SonarQube, Nexus Repository, or software supply chain security tooling.
• Familiarity with multi‑cloud environments and migration patterns from AWS or on‑premises platforms to GCP.
• Exposure to policy-as-code, platform engineering, developer portals, or internal developer platform concepts.
• Experience supporting regulated or enterprise‑scale environments with strong governance requirements.

Why This Role Matters

This role helps create the engineering foundation that enables teams to ship securely, reliably, and quickly. You will influence how Sonatype scales its platform capabilities, improves developer experience, and advances its DevSecOps maturity on GCP.

You will work at the intersection of infrastructure, automation, security, and developer enablement, making a direct impact on product velocity and operational excellence.

Things that we are proud of

• 2025 AI Compliance Solution of the Year - AI Breakthrough Awards
• 2025 DEVIES Award to our SBOM Manager new product for its innovation and impact in developer technology
• 2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
• 2023 Fast Company Best Places for Innovators
• 2023 Gartner's Magic Quadrant
• 2023 Software Report's Top 100 Software Companies
• 2023 BuiltIn Best Places to Work
• 2022 Frost & Sullivan Technology Innovation Leader Award
• 2022 PeerSpot Silver Peer Award in Software Composition Analysis
• 2022 Tech Ascension Best DevOps Security Solution Award
• 2022 NVCT Cyber Company of the Year
• Company Wellness Week - We shut down company operations for a week to enable all employees to pursue personal growth and enjoy a much-needed and deserved rest.
• Paid Volunteer Time Off (VTO)
• Expansion of Sonatype’s India Innovation Hub in Hyderabad, reflecting our continued growth, commitment to innovation, and investment in talent to advance AI-driven software security globally

At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.