As a senior DevOps engineer at our company, you will be responsible for owning and evolving our Kubernetes-based platform on GCP with a focus on security and compliance. Your role will involve threat modeling, compliance gap analysis, incident response, and ensuring the reliability and security of our platform. **Key Responsibilities:**
Implement and maintain security controls aligned with HIPAA and SOC 2 requirements. - Manage IAM policies, RBAC, and least-privilege access across clusters and cloud projects. - Maintain audit logging, data retention policies, and encryption at rest and in transit. - Harden container security image scanning, pod security standards, network policies, and supply chain verification. - Design and document security procedures, access controls, and incident response plans. - Lead compliance audit preparation, gap assessment, and remediation. - Evaluate and implement security tooling vulnerability scanning, policy enforcement, and runtime operations. - Provision and manage cloud infrastructure as code across multiple regions. - Maintain Kubernetes clusters, GitOps deployments, and container registries. - Monitor platform health, respond to incidents, and tune performance. - Manage secrets, certificates, DNS, and networking. - Optimise cloud costs while maintaining reliability and performance. - Maintain CI/CD pipelines and automated deployment workflows. - Support development teams with cluster access, debugging, and deployment issues. - Manage dependency updates and infrastructure drift. **Qualifications Required:**
6+ years in a DevOps, DevSecOps, Site Reliability Engineering role or Platform Engineering with proven ownership of production infrastructure in a cloud environment. - 3+ years operating Kubernetes in production cluster lifecycle, workload management, and troubleshooting at scale. - Deep experience implementing security controls in cloud environments IAM, RBAC, encryption, secrets management, and network policies. - Hands-on experience with compliance frameworks (HIPAA, SOC 2, PCI-DSS, or similar) not just familiarity, but audit preparation and gap remediation. - Strong infrastructure-as-code proficiency with Terraform or OpenTofu writing, reviewing, and maintaining production IaC at scale. - Solid understanding of cloud networking VPC design, firewalls, load balancers, and DNS. - Comfortable with Linux CLI, git workflows, and troubleshooting distributed systems independently. - Scripting proficiency in Python, Bash, or Go for automation, tooling, and operational. In addition, some of the technologies and concepts you should be familiar with include GCP (GKE, IAM, KMS, Secret Manager, VPC, PSC), Helm, GitOps (ArgoCD or Flux), and observability stack experience with tools like Prometheus, Grafana, Loki, or similar. If you are passionate about security, compliance, and building reliable infrastructure, and if you enjoy working in a collaborative environment with modern technologies, this role could be a great fit for you. As a senior DevOps engineer at our company, you will be responsible for owning and evolving our Kubernetes-based platform on GCP with a focus on security and compliance. Your role will involve threat modeling, compliance gap analysis, incident response, and ensuring the reliability and security of our platform. **Key Responsibilities:**
Implement and maintain security controls aligned with HIPAA and SOC 2 requirements. - Manage IAM policies, RBAC, and least-privilege access across clusters and cloud projects. - Maintain audit logging, data retention policies, and encryption at rest and in transit. - Harden container security image scanning, pod security standards, network policies, and supply chain verification. - Design and document security procedures, access controls, and incident response plans. - Lead compliance audit preparation, gap assessment, and remediation. - Evaluate and implement security tooling vulnerability scanning, policy enforcement, and runtime operations. - Provision and manage cloud infrastructure as code across multiple regions. - Maintain Kubernetes clusters, GitOps deployments, and container registries. - Monitor platform health, respond to incidents, and tune performance. - Manage secrets, certificates, DNS, and networking. - Optimise cloud costs while maintaining reliability and performance. - Maintain CI/CD pipelines and automated deployment workflows. - Support development teams with cluster access, debugging, and deployment issues. - Manage dependency updates and infrastructure drift. **Qualifications Required:**
6+ years in a DevOps, DevSecOps, Site Reliability Engineering role or Platform Engineering with proven ownership of production infrastructure in a cloud environment. - 3+ years operating Kubernetes in production cluster lifecycle, workload management, and troubleshooting at scale. - Deep experience implementing security controls in cloud environments IAM, RBAC, encryption, secrets management, and netw