Senior GCP DevSecOps Engineer – Cloud Security & Infrastructure

Unleash the Power of Cloud Security & Infrastructure — Drive Innovation and Safeguard the Future!

Krakow-based opportunity with hybrid work model (up to 3 days remote per week).

As a Senior GCP DevSecOps Engineer – Cloud Security & Infrastructure, you will be working for our client, a leading global financial services organization, within HSBC's Global Cloud Services. You will spearhead Cloud Security Posture Management initiatives, leveraging cutting-edge technology and AI-supported tools to secure GCP environments. Your expertise will help foster secure cloud adoption, ensure compliance, and elevate customer satisfaction by delivering robust, scalable, and compliant cloud solutions.

Your main responsibilities:

• Build, deploy, and manage GCP foundation platform applications using tools like BigQuery, GKE, Cloud Build, Cloud Run, and Python.
• Engineer solutions on GCP using Infrastructure as Code (Terraform, Config Connector).
• Implement preventive security measures to enhance security posture centrally.
• Integrate, configure, deploy, and manage cloud services covering IAM, networking, logging, OS, and containers.
• Ensure adherence to Cloud Security Standards and Operational Risk standards, including network, firewall, OS, logging, monitoring, and resiliency.
• Support CI/CD pipelines and automated testing activities.
• Maintain good Change Management practices and update related operational documentation as needed.

You're ideal for this role if you have:

• At least 5 years of experience in building and managing services on Google Cloud Platform.
• Expert understanding of Cloud Security principles and GCP-specific best practices.
• Strong knowledge of DevOps and SRE principles, Infrastructure as Code, and related tools like Terraform.
• Hands-on experience with Terraform, Cloud Build, Flux CD, Helm, or similar CI/CD tools.
• Proficiency in at least one programming language such as Python, Go, or Bash.
• Security and compliance expertise, including IAM, auditing, monitoring tools, and automation.
• Excellent communication skills, capable of conveying complex concepts to diverse audiences.
• A solid understanding of risk management and experience ensuring compliance with relevant regulatory processes.

It is a strong plus if you have:

• Experience with additional GCP products such as GKE, BigQuery, Cloud Run, or Cloud Build.

Language Required for the role:
Fluent English (spoken and written)

Eligibility to work in:
Only candidates with an existing legal right to work in Europe will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.

Tech stack

• Google Cloud Platform (GCP)
• Terraform
• Cloud Security & IAM
• Python
• CI/CD pipelines
• Infrastructure as code
• Kubernetes (GKE)
• BigQuery
• Cloud Build
• Flux CD / Helm