Job description

Job Summary

Strong experience as a Platform Security Engineer, Cloud Security Engineer, Site Reliability Engineer, Platform Engineer or DevSecOps Engineer in cloud-native environments.
Hands-on experience securing cloud-native platforms, preferably GCP and GKE, including identity, IAM, networking, Kubernetes security, workload identity and platform hardening.
Experience with secrets management, certificate management, encryption, access controls, service-to-service security, mTLS and runtime security patterns.
Good working knowledge of Kubernetes, Istio or service mesh technologies, ingress/egress controls, network policies and secure workload deployment patterns.
Experience integrating security controls into operational processes, including monitoring, alerting, vulnerability remediation, incident response, evidence capture and continual improvement.
Strong understanding of CI/CD security, policy-as-code, container security, dependency risk, artefact controls and secure software supply chain principles.
Experience with Infrastructure as Code, preferably Terraform, and automation to standardise security controls and reduce manual intervention.
Ability to work across engineering, SRE, cyber/security, risk, architecture, supplier and operations teams to deliver pragmatic platform controls.

Banking or core banking platform experience.
Experience working with Thought Machine Vault.
Experience supporting large-scale distributed systems and business-critical regulated platforms.
Experience with GCP Security Command Centre, IAM, KMS, Secret Manager, Vault, Kubernetes admission controls, OPA, container scanning or runtime security tooling.
Experience with Dynatrace, OpenTelemetry, GKE, Istio, Apigee, Kafka, Terraform or CI/CD tooling.
Understanding of operational resilience, audit, risk, evidence capture and compliance expectations within a regulated environment.

Key Responsibilities

GCP Cloud Security Engineering & IAM Management

Kubernetes (GKE) Security Engineeri

Platform Security

Secrets Management & Encryption Engineering

Certificate Management & PKI Operations

Service-to-Service Security & mTLS Architecture

Istio Service Mesh Security & Traffic Governance

Network Security Engineering & Kubernetes Network Policies

Runtime Security Monitoring & Workload Protection

Vulnerability Management & Security Remediation

CI/CD Security & Secure Software Supply Chain

Policy-as-Code & Security Governance Automation

Container Security & Image Governance

Infrastructure as Code (Terraform) Security Automation

Security Monitoring, Alerting & Incident Response

Operational Security & SRE Collaboration

Audit Evidence, Compliance & Regulatory Controls

Cross-Functional Security Stakeholder Management

GCP Security Command Center (SCC) & Cloud Security Operations

KMS, Secret Manager & Vault Security Platforms

OPA (Open Policy Agent) & Admission Control Security

Thought Machine Vault Platform Security

Core Banking Platform Security & Regulatory Compliance

Dynatrace/OpenTelemetry Security Observability

Apigee API Security & Gateway Governance

Kafka Security & Event Platform Protection

Operational Resilience, Risk & Control Assurance

Skill Requirements

Other Requirements

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.