GCP DevSecOps Engineer

Job Title: GCP DevSecOps Engineer Location: Sheffield - 3 days per week in the office Salary/Rate: £460 per day inside IR35 Start Date: 01/09/2026 Job Type: Contract Company Introduction We have an exciting opportunity now available with one of our sector-leading financial services clients! They are currently looking for a skilled GCP DevSecOps Engineer to join their team for a six-month contract. Job Responsibilities/Objectives • Build, deploy and manage components of the GCP foundation platform using Google Cloud services (e.g., GKE, BigQuery, Cloud Build, Cloud Run) and automation-first engineering practices. • Engineer repeatable platform and security capabilities using Infrastructure as Code (IaC), such as Terraform and/or Config Connector, following established engineering standards. • Implement and enhance preventive security controls and guardrails centrally to improve overall cloud security posture and reduce operational risk. • Integrate, configure, deploy and manage common cloud services across IAM, networking, logging/monitoring, operating systems and container platforms. • Embed security into delivery pipelines by building and supporting CI/CD and continuous testing capabilities (e.g., Cloud Build, GitOps tooling such as FluxCD, Helm). • Ensure alignment and compliance with centrally defined Cloud Security Standards and contribute to auditability through evidence, controls mapping and documentation. • Operate within agreed change management practices, producing impact assessments where required and ensuring controlled, traceable deployments. • Maintain high-quality operational documentation, runbooks and support procedures to enable sustainable operations and effective handover. Required Skills/Experience The ideal candidate will have the following: • Hands-on, demonstrable experience on GCP building and operating cloud services in production (hands-on GCP experience is essential). • Strong experience with core GCP services; exposure to GKE, BigQuery, Cloud Build and/or Cloud Run is highly desirable. • Expert understanding of cloud security principles and GCP-specific best practices, including IAM design, logging/monitoring, network security controls and workload security. • Strong understanding of DevOps/SRE principles, including reliability, observability, incident response supportability and engineering for resilience. • Proven experience implementing Infrastructure as code using Terraform (and/or Config Connector), including module design, environments, policy-driven controls and automated deployment patterns. • Experience building and operation CI/CD and related tooling (e.g., Cloud Build, GitOps, FluxCD, Helm) with security controls embedded into delivery workflows. • Good programming/scripting skills in at least one of: Python, Go, Bash, with practical mindset for automation and operational tooling. • Security and compliance experience, including auditability, control evidence, configuration management and the ability to work with compliance/auditing/monitoring tooling. • Strong communication and stakeholder management skills, with the ability ot explain complex technical topics clearly to engineers and non-engineers. • A solid understanding of risk management and proven experience ensuring compliance with relevant regulatory and internal control requirements. Desirable Skills/Experience Although not essential, the following skills are desired by the client: • GCP certifications (e.g., Professional Cloud Security Engineer, Professional Cloud DevOps Engineer, Professional Cloud Architect). • Experience operation regulated workloads in a large enterprise environment. • Experience with container security patterns and Kubernetes hardening approaches. • Familiarity integrating security findings and policy checks into DevSecOps workflows and reporting. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.