Senior GCP DevSecOps Engineer – Cloud Security & Infrastructure

Talanto; Kraków; Hybrid; PLN 281,000 - 340,000; Full time

Job summary

Talanto invites a Senior GCP DevSecOps Engineer to join a Kraków-based project within HSBC's Global Cloud Services. The role focuses on Cloud Security Posture Management, IaC with Terraform, and securing GCP environments, delivering robust, scalable cloud solutions in a hybrid setup (up to 3 days remote).

You'll build and manage GCP foundation apps using BigQuery, GKE, Cloud Build, Cloud Run, and Python, implement security controls, IAM, networking, logging, and support CI/CD pipelines with

Qualifications

• At least 5 years of experience building and managing services on Google Cloud Platform.
• Strong knowledge of Cloud Security principles and GCP best practices.
• Hands-on experience with Terraform and CI/CD tooling.

Responsibilities

• Build, deploy, and manage GCP foundation platform apps using BigQuery, GKE, Cloud Build, Cloud Run, and Python.
• Engineer solutions on GCP using Infrastructure as Code (Terraform, Config Connector).
• Implement preventive security measures to enhance security posture centrally.
• Integrate, configure, deploy, and manage cloud services covering IAM, networking, logging, OS, and containers.
• Ensure adherence to Cloud Security Standards and Operational Risk standards.
• Support CI/CD pipelines and automated testing activities.
• Maintain Change Management practices and update related operational documentation.

Skills

Google Cloud Platform (GCP)

Terraform

CI/CD

Python

Go

Bash

Cloud Security

DevOps

SRE

Security & Compliance

CI/CD tooling

Tools

Terraform

Config Connector

Flux CD

Helm

Cloud Build

BigQuery

GKE

Cloud Run

Job description

DevOps Terraform Python CI/CD GCP 25,200 – 30,450 PLN

Important: if an employer asks you to log into their system via iCloud or Google, send a code, an SMS or Telegram password, run some code, or install software — refuse. These are signs of fraud.

Unleash the Power of Cloud Security & Infrastructure — Drive Innovation and Safeguard the Future!

Krakow-based opportunity with hybrid work model (up to 3 days remote per week).

As a Senior GCP DevSecOps Engineer – Cloud Security & Infrastructure, you will be working for our client, a leading global financial services organization, within HSBC's Global Cloud Services. You will spearhead Cloud Security Posture Management initiatives, leveraging cutting-edge technology and AI-supported tools to secure GCP environments. Your expertise will help foster secure cloud adoption, ensure compliance, and elevate customer satisfaction by delivering robust, scalable, and compliant cloud solutions.

Your main responsibilities:

• Build, deploy, and manage GCP foundation platform applications using tools like BigQuery, GKE, Cloud Build, Cloud Run, and Python.
• Engineer solutions on GCP using Infrastructure as Code (Terraform, Config Connector).
• Implement preventive security measures to enhance security posture centrally.
• Integrate, configure, deploy, and manage cloud services covering IAM, networking, logging, OS, and containers.
• Ensure adherence to Cloud Security Standards and Operational Risk standards, including network, firewall, OS, logging, monitoring, and resiliency.
• Support CI/CD pipelines and automated testing activities.
• Maintain good Change Management practices and update related operational documentation as needed.

You're ideal for this role if you have:

• At least 5 years of experience in building and managing services on Google Cloud Platform.
• Expert understanding of Cloud Security principles and GCP-specific best practices.
• Strong knowledge of DevOps and SRE principles, Infrastructure as Code, and related tools like Terraform.
• Hands-on experience with Terraform, Cloud Build, Flux CD, Helm, or similar CI/CD tools.
• Proficiency in at least one programming language such as Python, Go, or Bash.
• Security and compliance expertise, including IAM, auditing, monitoring tools, and automation.
• Excellent communication skills, capable of conveying complex concepts to diverse audiences.
• A solid understanding of risk management and experience ensuring compliance with relevant regulatory processes.

It is a strong plus if you have:

• Experience with additional GCP products such as GKE, BigQuery, Cloud Run, or Cloud Build.

Language Required for the role:
Fluent English (spoken and written)

Eligibility to work in:
Only candidates with an existing legal right to work in Europe will be considered for this role.