Senior GCP DevSecOps Engineer

Job Description

Anticipated Contract End Date/Length: ASAP - July 31st, 2027
Work set up: Hybrid (3 days onsite is mandatory)

Our client in the Information Technology and Services industry is looking for a highly technical Senior GCP DevSecOps Engineer with strong hands-on Google Cloud Platform (GCP) experience. The successful candidate should be able to build secure cloud platforms, automate infrastructure, embed security into delivery pipelines, and operate within a regulated enterprise banking environment.

What you will do:

• Build, deploy and manage components of the HSBC GCP foundation platform using Google Cloud services (e.g., GKE, BigQuery, Cloud Build, Cloud Run) and automation-first engineering practices.
• Engineer repeatable platform and security capabilities using Infrastructure as Code (IaC), such as Terraform and/or Config Connector, following established engineering standards.
• Implement and enhance preventive security controls and guardrails centrally to improve overall cloud security posture and reduce operational risk.
• Integrate, configure, deploy and manage common cloud services across IAM, networking, logging/monitoring, operating systems and container platforms.
• Embed security into delivery pipelines by building and supporting CI/CD and continuous testing capabilities (e.g., Cloud Build, GitOps tooling such as FluxCD, Helm).
• Ensure alignment and compliance with centrally defined Cloud Security Standards and contribute to auditability through evidence, controls mapping and documentation.
• Operate within agreed change management practices, producing impact assessments where required and ensuring controlled, traceable deployments.
• Maintain high-quality operational documentation, runbooks and support procedures to enable sustainable operations and effective handover.