Senior DevSecOps & SRE — Cloud Security Lead

Lumenalta; Mexico; On-site; MXN 1,525,000 - 2,373,000; Full time

Job summary

Lumenalta seeks a Senior DevSecOps / SRE Engineer for a fully remote LATAM role. You will mature security posture across a high-traffic digital platform on GCP, wiring security into CI/CD, tightening IAM, and hardening edge security with Fastly.

Expect ownership from day one and cross-functional collaboration with security, SRE, and platform teams. You’ll deploy on Cloud Run, enhance observability with New Relic and GCP tooling, and implement just-in-time access via PAM.

Qualifications

• Production GCP experience in live environments.
• Senior DevSecOps or security-focused SRE background with high-traffic platforms.
• Security in CI/CD: vulnerability scanning, policy gates, secret scanning, branch protections.
• Experience with Wiz or similar CNAPP (Prisma Cloud, Aqua, Snyk).
• GCP IAM least privilege: review/remediate service accounts, roles, bindings.
• Terraform for GCP provisioning with least privilege constraints.
• Fastly WAF/edge security: configure rules, rate limiting, edge authentication.
• Cloud Run: deploy/operate containerized workloads.
• Observability/alerting: New Relic and/or GCP tooling for SRE signals.
• Familiarity with IaC security, drift detection, and multi-hat roles.

Responsibilities

• Wire security scanning into CI/CD pipelines before merge.
• Review and harden GCP IAM configurations for least privilege.
• Configure and maintain Fastly WAF rules and edge security.
• Assist with Google Cloud PAM implementation and just-in-time access.
• Own and extend Terraform IaC for GCP provisioning.
• Support Cloud Run workloads across the platform.
• Implement and maintain observability and alerting with New Relic/GCP tooling.
• Contribute broadly across SRE functions and on-call support.
• Execute Jira tickets with strong ownership from day one.

Skills

GCP ownership

DevSecOps/SRE

CI/CD security

CNAPP tooling

IAM least privilege

Terraform

Waf/edge security

Cloud Run

Observability

Cross-functional ownership

Tools

Wiz

Prisma Cloud

Aqua

Snyk

GitHub Actions

GitLab CI

Terraform

New Relic

Job description

Lumenalta seeks a Senior DevSecOps / SRE Engineer for a fully remote LATAM role. You will mature security posture across a high-traffic digital platform on GCP, wiring security into CI/CD, tightening IAM, and hardening edge security with Fastly.

Expect ownership from day one and cross-functional collaboration with security, SRE, and platform teams. You’ll deploy on Cloud Run, enhance observability with New Relic and GCP tooling, and implement just-in-time access via PAM.