DevSecOps Engineer

About the role

Internalise and secure service endpoints — move external-facing services to internal load balancers, private endpoints, and VPN/interconnect. Continuously audit and reduce the public attack surface. Harden GKE clusters — CIS benchmarks, pod security standards (restricted/baseline), and admission control policies.

What you'll do

• Own cloud security posture management (CSPM) across GCP and AWS — continuous assessment, misconfiguration detection, and remediation tracking
• Design and enforce IAM policies, service account hygiene, least-privilege access controls, and workload identity across multi-cloud environments
• Implement VPC security controls — private service access, firewall rules, network policies, ingress/egress restrictions, and Private Google Access
• Manage secrets hygiene — enforce Secret Manager (GCP) and AWS Secrets Manager, eliminate hardcoded credentials, and rotate secrets programmatically
• Lead cloud security incident response — triage, contain, investigate, and remediate across cloud and Kubernetes environments

What you need

• AWS
• CI/CD
• Kubernetes
• GCP
• Cloud security
• IAM

Good to have

• Splunk
• Python
• SIEM
• Penetration testing
• Go
• ISO 27001