DevSecOps Engineer

📋 Description

• Own cloud security posture management (CSPM) across GCP and AWS — continuous assessment
• Design and enforce IAM policies, service account hygiene, least-privilege access controls, and
• Implement VPC security controls — private service access, firewall rules, network policies
• Internalise and secure service endpoints — move external-facing services to internal load
• Manage secrets hygiene — enforce Secret Manager (GCP) and AWS Secrets Manager, eliminate hardcoded
• Lead cloud security incident response — triage, contain, investigate, and remediate across cloud

🎯 Requirements

• 7+ years in DevSecOps, cloud security, or infrastructure security engineering
• Deep hands-on experience securing Kubernetes clusters in production — RBAC, network policies, pod
• Proven experience with GCP and/or AWS security services and IAM design
• Strong CI/CD security knowledge — pipeline hardening, secrets management, and integrated scanning
• Experience internalising service endpoints and reducing cloud attack surface
• Familiarity with HIPAA, SOC 2, or ISO 27001 compliance in regulated environments