Senior Cloud DevSecOps Engineer – GCP Compliance Automation

About the role

We are looking for a Senior Cloud DevSecOps Engineer to lead our Google Cloud compliance automation initiative. You will focus on building automated compliance checks for Kubernetes and overall cloud security posture using Google Cloud Security Command Center and Compliance Manager.

Key responsibilities

• Develop automated compliance checks using Common Expression Language (CEL) within SCC and Compliance Manager.
• Translate CIS Benchmarks and NIST 800‑53 controls into enforceable cloud validation logic.
• Evaluate and secure GKE/Kubernetes environments, including workload permissions, RBAC, and policy compliance.
• Identify compliance gaps and implement automated policy checks.
• Support Terraform, CI/CD pipelines, and cloud security automation initiatives.
• Build and validate checks across GKE, IAM, Logging, Networking, and Kubernetes workloads.

Required profile

• 7+ years of cloud/infrastructure engineering experience.
• 3+ years of hands‑on GCP experience.
• Strong experience securing GKE/Kubernetes environments and working with GCP IAM and Security Command Center.
• Proficiency with Terraform and CI/CD pipelines.
• Strong scripting and automation background.
• Ability to translate compliance requirements into technical validation checks.

Required skills

• Google Cloud Platform (GCP)
• Google Kubernetes Engine (GKE) & Kubernetes
• Security Command Center (SCC)
• Terraform
• CI/CD pipelines
• Common Expression Language (CEL)
• Policy‑as‑Code / Compliance‑as‑Code
• CIS Benchmarks, NIST 800‑53
• Scripting (e.g., Python, Bash)
• IAM, Logging, Networking

What we offer

• Exciting projects at the forefront of digital transformation.
• Collaborative, open environment with global teams.
• Flexible work schedules promoting work‑life balance.
• Professional development: training, certifications, English classes.
• Competitive salary, family medical insurance, extended paternity leave, performance and referral bonuses.