DevSecOps Engineer

Job Description

Job Description

Cloud Security — Primary

• Own cloud security posture management (CSPM) across GCP and AWS — continuous assessment, misconfiguration detection, and remediation tracking.
• Design and enforce IAM policies, service account hygiene, least-privilege access controls, and workload identity across multi-cloud environments.
• Implement VPC security controls — private service access, firewall rules, network policies, ingress/egress restrictions, and Private Google Access.
• Internalise and secure service endpoints — move external-facing services to internal load balancers, private endpoints, and VPN/interconnect. Continuously audit and reduce the public attack surface.
• Manage secrets hygiene — enforce Secret Manager (GCP) and AWS Secrets Manager, eliminate hardcoded credentials, and rotate secrets programmatically.
• Lead cloud security incident response — triage, contain, investigate, and remediate across cloud and Kubernetes environments.
• Own compliance reporting for SOC 2, HIPAA, and ISO 27001 — evidence collection, gap analysis, and control implementation.
• Conduct regular threat modelling, security reviews, and architecture risk assessments.
  

Kubernetes Security — Primary

• Harden GKE clusters — CIS benchmarks, pod security standards (restricted/baseline), and admission control policies.
• Implement and manage network policies to enforce east-west traffic segmentation between namespaces and services.
• Deploy and operate runtime security tooling (e.g. Falco) for threat detection inside cluster workloads.
• Manage Kubernetes RBAC with least-privilege principles. Audit and remediate overpermissioned service accounts.
• Secure the container supply chain — image scanning in CI (Trivy/Snyk), enforce signed images, and maintain a trusted registry policy.
• Implement Istio security controls — mTLS enforcement, authorisation policies, and east-west traffic observability.
• Continuously audit running workloads for security drift — privileged containers, host path mounts, and secrets in environment variables.

Are you interested in this position?
Apply by clicking on the “Apply Now” button below!
#GraphicDesignJobsOnline
#WebDesignRemoteJobs
#FreelanceGraphicDesigner
#WorkFromHomeDesignJobs
#OnlineWebDesignWork
#RemoteDesignOpportunities
#HireGraphicDesigners
#DigitalDesignCareers
# Dynamicbrand guru