Senior GCP DevSecOps Engineer - Google Cloud Platform (GCP)

Principle Pride; Hyderabad; On-site; INR 2,600,000 - 4,600,000; Full time

Job summary

Principle Pride is seeking a hands-on Cloud Security Engineer to build and operate the GCP foundation platform in Hyderabad. You will deploy and manage GKE, BigQuery, Cloud Build, and Cloud Run, with a focus on automation-first engineering and secure-by-default designs.

You will implement IaC with Terraform and Config Connector, embed security into CI/CD pipelines, and drive continuous improvement in cloud security, observability, and compliance across enterprise workloads.

Qualifications

• Hands-on experience on Google Cloud Platform building and operating cloud services in production.
• Strong experience with core GCP services such as GKE, BigQuery, Cloud Build and Cloud Run.
• Expert understanding of cloud security principles, including 1AM design, logging/monitoring, network security controls and workload security.
• Strong understanding of DevOps/SRE principles, including reliability, observability, incident response and resilience engineering.
• Proven experience implementing Infrastructure as Code using Terraform (and Config Connector), including module design, environments and automated deployment patterns.
• Experience building and operating CI/CD and related tooling (Cloud Build, GitOps, FluxCD, Helm) with security controls embedded into delivery workflows.
• Good programming/scripting skills in Python, Go, or Bash, with automation focus.
• Security and compliance experience, including auditability, control evidence and configuration management.
• Strong communication and stakeholder management skills to explain complex topics clearly.
• Knowledge of risk management and ensuring compliance with regulatory/internal controls.

Responsibilities

• Build, deploy and manage components of the GCP foundation platform using Google Cloud services and automation-first practices.
• Engineer repeatable platform and security capabilities using Infrastructure as Code (Terraform, Config Connector).
• Implement and enhance preventive security controls and guardrails to improve security posture and reduce risk.
• Integrate, configure, deploy and manage common cloud services across 1AM, networking, logging/monitoring, OS and container platforms.
• Embed security into delivery pipelines by supporting CI/CD and continuous testing (Cloud Build, GitOps tools).
• Ensure alignment with Cloud Security Standards and provide evidence, controls mapping and documentation.
• Operate change management practices with impact assessments and controlled deployments.
• Maintain high-quality operational documentation, runbooks and handover procedures.

Skills

Google Cloud Platform (GCP)

GKE

BigQuery

Cloud Build

Cloud Run

Terraform

Config Connector

CI/CD

FluxCD

Helm

Python

Go

Bash

Security principles

Cloud security

DevOps/SRE

Monitoring/logging

Kubernetes

Automation

Tools

Terraform

Config Connector

FluxCD

Helm

Cloud Build

Git

Job description

• Build, deploy and manage components of the HSBC GCP foundation platform using Google Cloud services (e.g., GKE, BigOuery, Cloud Build, Cloud Run) and automation-first engineering practices.
• Engineer repeatable platform and security capabilities using Infrastructure as Code (laC), such as Terraform and/or Config Connector, following established engineering standards.
• Implement and enhance preventive security controls and guardrails centrally to improve overall cloud security posture and reduce operational risk.
• Integrate, configure, deploy and manage common cloud services across 1AM, networking, logging/monitoring, operating systems and container platforms.
• Embed security into delivery pipelines by building and supporting Cl/CD and continuous testing capabilities (e.g., Cloud Build, GitOps tooling such as FluxCD, Helm).
• Ensure alignment and compliance with centrally defined Cloud Security Standards and contribute to auditability through evidence, controls mapping and documentation.
• Operate within agreed change management practices, producing impact assessments where required and ensuring controlled, traceable deployments.
• Maintain high-quality operational documentation, runbooks and support procedures to enable sustainable operations and effective handover.

What you need to have to succeed in this role

The ideal candidate for this role will have the following experience and capabilities:

• Hands-on, demonstrable experience on Google Cloud Platform building and operating cloud services in production (hands-on GCP experience is essential).
• Strong experience with core GCP services; exposure to GKE, BigQuery, Cloud Build and/or Cloud Run is highly desirable.
• Expert understanding of cloud security principles and GCP-specific best practices, including 1AM design, logging/monitoring, network security controls and workload security.
• Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience.
• Proven experience implementing Infrastructure as Code using Terraform (and/or Config Connector), including module design, environments, policy-driven controls and automated deployment patterns.
• Experience building and operating Cl/CD and related tooling (e.g., Cloud Build, GitOps, FluxCD, Helm) with security controls embedded into delivery workflows.
• Good programming/scripting skills in at least one of: Python, Go, Bash, with a practical mindset for automation and operational tooling.
• Security and compliance experience, including auditability, control evidence, configuration management and the ability to work with compliance/auditing/monitoring tooling.
• Strong communication and stakeholder management skills, with the ability to explain complex technical topics clearly to engineers and non-engineers.
• A solid understanding of risk management and proven experience ensuring compliance with relevant regulatory and internal control requirements.

Essential skills

• Building secure and compliant GCP capabilities using automation-first approaches.
• Implementing and operating preventive controls and guardrails at scale.
• Strong troubleshooting capability across cloud infrastructure, Kubernetes/container platforms and Cl/CD pipelines.
• Ability to drive continuous improvement, simplify operational processes and reduce toil through automation.
• GCP certifications (e.g., Professional Cloud Security Engineer, Professional Cloud DevOps Engineer, Professional Cloud Architect).
• Experience operating regulated workloads in a large enterprise environment.
• Experience with container security patterns and Kubernetes hardening approaches.
• Familiarity integrating security findings and policy checks into DevSecOps workflows and reporting.