Senior DevSecOps

Key Responsibilities

• Lead the architecture, implementation, and optimization of DevSecOps and CI/CD pipelines using GitLab CI/CD.
  
• Establish GitLab branching, Merge Request (MR), code-review, approval, deployment, rollback, and release-management standards.
  
• Build and maintain automated deployment pipelines across development, test, staging, and production environments.
  
• Design and manage Infrastructure as Code (IaC) using Terraform, including reusable modules, state management, and automated infrastructure provisioning.
  
• Lead GCP cloud engineering initiatives focused on scalability, reliability, security, and operational efficiency.
  
• Design and implement cloud networking including VPCs, VPC Service Controls, security perimeters, firewalls, load balancers, DNS, private connectivity, and TLS/SSL certificates.
  
• Implement enterprise IAM strategies, including role-based access, least privilege, service-account provisioning, workload identity, and access governance.
  
• Partner with SecOps teams to integrate vulnerability management, security scanning, monitoring, incident response, and security controls into the software delivery lifecycle.
  
• Lead infrastructure and platform engineering for lakehouse and data-engineering environments.
  
• Support GCS, BigQuery, Apache Iceberg, lakehouse runtimes, data catalogs, and database integrations.
  
• Architect and support Starburst Enterprise Platform (SEP) / Starburst Galaxy, including Trino query engines, Unified Access Tier, data virtualization, and federated data access.
  
• Integrate Starburst/Trino with Iceberg, BigQuery, GCS, databases, and enterprise data sources.
  
• Provide technical leadership, mentoring, architecture guidance, code reviews, and production support across DevOps, Security, Cloud, and Data Engineering teams.
  
• Drive automation, standardization, platform reliability, security posture, and continuous improvement.
  

Required Technical Skills

DevSecOps / CI/CD

• GitLab, GitLab CI/CD, Git, Merge Requests
  
• CI/CD pipeline architecture and deployment automation
  
• Security scanning and DevSecOps practices
  

Cloud / Infrastructure

• Google Cloud Platform (GCP)
  
• Terraform / Infrastructure as Code
  
• IAM, service accounts, workload identity
  
• VPC, VPC Service Controls, security perimeters
  
• Firewalls, load balancers, DNS, private connectivity
  
• TLS/SSL certificates and certificate lifecycle management
  

Security

• Cloud security architecture
  
• SecOps and vulnerability management
  
• Least-privilege access and security controls
  
• Security automation and compliance practices
  

Data / Lakehouse

• GCS and BigQuery
  
• Apache Iceberg
  
• Lakehouse architecture and runtimes
  
• Data catalogs
  
• Database integration and connectivity
  
• Starburst Enterprise / Starburst Galaxy
  
• Trino
  
• Query engines and distributed data processing
  
• Unified Access Tier
  
• Data virtualization and federated data access
  

Qualifications

• 10+ years of experience in DevOps, Cloud Engineering, SRE, Infrastructure, or related engineering disciplines.
  
• 3+ years in a senior/lead DevSecOps, Cloud Engineering, or Platform Engineering capacity.
  
• Strong hands-on experience designing and implementing enterprise GCP environments.
  
• Proven experience leading cloud infrastructure automation using Terraform.
  
• Strong understanding of cloud security, networking, IAM, and enterprise architecture.
  
• Experience working across Security, DevOps, Data Engineering, Application Development, and Architecture teams.
  
• Demonstrated ability to lead technical initiatives while remaining hands-on with engineering and troubleshooting.
  
• GCP, Terraform, Kubernetes, Security, or DevSecOps certifications are a plus.