Senior DevSecOps Engineer - GCP & Kubernetes Security

Whereby; United States; On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity

25 days holiday

Hybrid working

Nomad working

Family leave

Private medical insurance

Mental health support

Learning budget

Cycle to work

Refer a friend

Team socials

Dog-friendly office

Job summary

Yapily in the United States is seeking a Senior DevSecOps Engineer to embed security across the Software Development Lifecycle on a high-availability, multi-tenant GCP Kubernetes platform. You will own security tooling, automate compliance checks, harden IAM and network policies, and partner with engineering to deploy secure services via guardrails in CI/CD pipelines.

If you bring hands-on cloud security, Terraform or OpenTofu, CSPM tools, and automation in Python or Go, you’ll help us scale

Qualifications

• Deep practical experience designing, managing, and securing high-availability infrastructure in GCP.
• Proven ability to design, implement and enforce automated security guardrails across CI/CD and cloud environments.
• Experience in securing Kubernetes (GKE) clusters, IAM, network policies, and secret management.

Responsibilities

• Own Security Tooling: selecting, integrating, and maintaining tooling in environments and CI/CD pipelines.
• Engineering Security Guardrails: design, implement, enforce automated guardrails and policies across cloud and CI/CD.
• GCP Security Focus: hardening IAM, network security, and resource configurations in Google Cloud.
• Compliance Automation: translate requirements into automated, verifiable infrastructure and deployment practices.
• Vulnerability & Patch Management: automate end-to-end processes to identify, triage, and remediate vulnerabilities.
• Developer Empowerment: build golden paths for secure service deployment and safe code rollout.

Skills

Cloud security (GCP)

Kubernetes security

API security

IaC (Terraform/OpenTofu)

Security tooling

Automation scripting (Python/Golang/S

CI/CD guardrails

Tools

Terraform

OpenTofu

Aqua Security

Falco

Prisma Cloud

GitLab CI

GitHub Actions

Job description

Yapily in the United States is seeking a Senior DevSecOps Engineer to embed security across the Software Development Lifecycle on a high-availability, multi-tenant GCP Kubernetes platform. You will own security tooling, automate compliance checks, harden IAM and network policies, and partner with engineering to deploy secure services via guardrails in CI/CD pipelines.

If you bring hands-on cloud security, Terraform or OpenTofu, CSPM tools, and automation in Python or Go, you’ll help us scale