DevSecOps Engineer GCP(Google Cloud Platform)

Role Description:

•           Build, deploy and manage components of the bank GCP foundation platform using Google Cloud services (e.g., GKE, BigQuery, Cloud Build, Cloud Run) and automation-first engineering practices.

•           Engineer repeatable platform and security capabilities using Infrastructure as Code (IaC), such as Terraform and/or Config Connector, following established engineering standards.

•           Implement and enhance preventive security controls and guardrails centrally to improve overall cloud security posture and reduce operational risk.

•           Integrate, configure, deploy and manage common cloud services across IAM, networking, logging/monitoring, operating systems and container platforms.

•           Embed security into delivery pipelines by building and supporting CI/CD and continuous testing capabilities (e.g., Cloud Build, GitOps tooling such as FluxCD, Helm).

•           Ensure alignment and compliance with centrally defined Cloud Security Standards and contribute to auditability through evidence, controls mapping and documentation.

•           Operate within agreed change management practices, producing impact assessments where required and ensuring controlled, traceable deployments.

•           Maintain high-quality operational documentation, runbooks and support procedures to enable sustainable operations and effective handover.

•           Hands-on, demonstrable experience on GCP building and operating cloud services in production (hands-on GCP experience is essential).

•           Strong experience with core GCP services; exposure to GKE, BigQuery, Cloud Build and/or Cloud Run is highly desirable.

•           Expert understanding of cloud security principles and GCP-specific best practices, including IAM design, logging/monitoring, network security controls and workload security.

•           Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience.

•           Proven experience implementing Infrastructure as code using Terraform (and/or Config Connector), including module design, environments, policy-driven controls and automated deployment patterns.

•           Experience building and operation CI/CD and related tooling (e.g., Cloud Build, GitOps, FluxCD, Helm) with security controls embedded into delivery workflows.

•           Good programming/scripting skills in at least one of: Python, Go, Bash, with practical mindset for automation and operational tooling.

•           Security and compliance experience, including auditability, control evidence, configuration management and the ability to work with compliance/auditing/monitoring tooling.

•           Strong communication and stakeholder management skills, with the ability ot explain complex technical topics clearly to engineers and non-engineers.

•           A solid understanding of risk management and proven experience ensuring compliance with relevant regulatory and internal control requirements.

•           Building secure and compliant GCP capabilities using automation-first approaches.

•           Implementing and operating preventive controls and guardrails at scale.

•           Strong troubleshooting capability across cloud infrastructure, Kubernetes/container platforms and CI/CD pipelines.

•           Ability to drive continuous improvement, simplify operational processes and resuce oil through automation.

•           GCP certifications (e.g., Professional Cloud Security Engineer, Professional Cloud DevOps Engineer, Professional Cloud Architect).

•           Experience operation regulated workloads in a large enterprise environment.

•           Experience with container security patterns and Kubernetes hardening approaches.

•           Familiarity integrating security findings and policy checks into DevSecOps workflows and reporting.