Senior DevOps Engineer - Cloud Infrastructure

Were looking for a senior DevOps engineer who treats security as a first principle, not an afterthought. You will own and evolve our Kubernetes-based platform on GCP keeping it reliable, secure, and developer

friendly while driving our HIPAA and SOC 2 compliance posture forward. The work is rarely routine: it involves threat modelling, compliance gap analysis, incident response, and building the kind of platform that other engineers trust with their deployments.

If you enjoy designing systems that are secure by default, thinking in threat models, and building infrastructure that others depend on, youll feel at home here.

What Youll Do :

Security & Compliance :

- Implement and maintain security controls aligned with HIPAA and SOC 2 requirements.

- Manage IAM policies, RBAC, and least-privilege access across clusters and cloud projects.

- Maintain audit logging, data retention policies, and encryption at rest and in transit.

- Harden container security image scanning, pod security standards, network policies, and supply chain verification.

- Design and document security procedures, access controls, and incident response plans.

- Lead compliance audit preparation, gap assessment, and remediation.

- Evaluate and implement security tooling vulnerability scanning, policy enforcement, and runtime protection.

Infrastructure & Operations :

- Maintain Kubernetes clusters, GitOps deployments, and container registries.

- Monitor platform health, respond to incidents, and tune performance.

- Manage secrets, certificates, DNS, and networking.

- Optimise cloud costs while maintaining reliability and performance targets.

CI/CD & Developer Support :

- Support development teams with cluster access, debugging, and deployment issues.

- Manage dependency updates and infrastructure drift.

What Were Looking For :

Must-Have Skills :

- 6+ years in a DevOps, DevSecOps, Site Reliability Engineering role or Platform Engineering with proven ownership of production infrastructure in a cloud environment.

- 3+ years operating Kubernetes in production cluster lifecycle, workload management, and

troubleshooting at scale (non-negotiable).

- Deep experience implementing security controls in cloud environments IAM, RBAC, encryption, secrets management, and network policies.

- Hands-on experience with compliance frameworks (HIPAA, SOC 2, PCI-DSS, or similar) not just familiarity, but audit preparation and gap remediation.

- Strong infrastructure-as-code proficiency with Terraform or OpenTofu writing, reviewing, and maintaining production IaC at scale.

- Solid understanding of cloud networking VPC design, firewalls, load balancers, and DNS.

- Comfortable with Linux CLI, git workflows, and troubleshooting distributed systems independently.

- Scripting proficiency in Python, Bash, or Go for automation, tooling, and operational tasks.

Nice-to-Have Skills :

- Experience in a regulated industry healthcare, legal, or finance.

- GCP experience (GKE, IAM, KMS, Secret Manager, VPC, PSC) or equivalent depth on AWS or Azure.

- Helm and GitOps experience ArgoCD or Flux in production.

- Observability stack experience Prometheus, Grafana, Loki, or similar.

Do These Ring a Bell?

- The difference between a NetworkPolicy and a Pod Security Standard and why you need both

- IRSA vs. Workload Identity and the blast radius implications of each

- Why External Secrets Operator beats baking secrets into container images

- Atlantis PR workflows and why GitOps for Terraform changes matters in a team setting

Why Youll Love It Here :

- Real Ownership : You wont be a ticket executor. You will shape and own the platform.

- Meaningful Security Work : HIPAA and SOC 2 compliance in a regulated product environment, not checkbox exercises.

- Modern Stack : GKE, ArgoCD, Terraform, Cloudflare Zero Trust, and a full observability stack. No legacy baggage.

- Collaborative Environment : We believe that everyone has a voice that matters.

- Work Life Balance : Our flexible remote-first environment encourages you to have space to recharge.