Design, implement, and maintain Rego policy-as-code and IaC (Terraform) for secure GCP infrastructure. Integrate security into CI/CD, conduct security assessments and threat modeling, respond to incidents, and promote GCP security best practices across teams.
Job Description:
We are seeking a skilled and experienced DevSecOps Engineer with a strong specialization in Google Cloud Platform (GCP) to join our dynamic team. In this role, you will play a pivotal role in ensuring the security and integrity of our software development processes on GCP. Your expertise in GCP, Rego policies, and Terraform will be instrumental in building a secure and efficient development pipeline.
Responsibilities:
- Develop, implement, and maintain Rego policies to enforce security controls and compliance standards within our GCP infrastructure and applications.
- Collaborate with development and operations teams to integrate security into the GCP-focused CI/CD pipeline, ensuring security checks and scans are automated and seamlessly incorporated.
- Leverage your GCP expertise to architect and implement secure microservices and containerized applications, ensuring compliance with GCP security best practices.
- Design and implement infrastructure-as-code (IaC) using Terraform to define and manage GCP resources securely and efficiently.
- Perform thorough security assessments on GCP environments, utilizing GCP-specific security tools and technologies, to identify and address potential vulnerabilities.
- Conduct threat modeling and risk assessments for GCP deployments, designing effective security solutions tailored to GCP services.
- Collaborate with cross-functional teams to respond to GCP-specific security incidents promptly, conduct root cause analysis, and implement corrective actions.
- Stay current with GCP advancements, industry security trends, and best practices, sharing knowledge and insights with team members.
- Drive a culture of security awareness specific to GCP environments, ensuring security considerations are integrated throughout development.
Requirements:
- Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).
- Proven experience as a DevSecOps Engineer with a strong focus on GCP
- Expertise in Rego policies and policy-as-code practices especially with implementation in GCP. THIS IS AN ABSOLUTE MUST
- In-depth understanding of GCP services, security controls, and best practices.
- Proficiency in using GCP-specific security tools, vulnerability scanners, and penetration testing tools.
- Experience with Wiz and its integration for continuous security monitoring in GCP environments.
- Strong experience with infrastructure-as-code (IaC) using Terraform for GCP resource provisioning and management.
- Familiarity with CI/CD pipelines and automation tools (e.g., Jenkins, GitLab CI/CD) with GCP integrations.
- Solid knowledge of GCP security frameworks, standards, and compliance requirements.
- Strong understanding of container security in GCP and experience securing microservices.
- Excellent communication and collaboration skills, with a proven ability to work effectively in cross-functional teams.
- Relevant GCP certifications such as Google Professional DevOps Engineer, Google Professional Cloud Security Engineer, or similar certifications are highly advantageous.
If you're enthusiastic about combining your GCP expertise, Rego policies knowledge, and Terraform skills to shape a secure GCP development environment, we invite you to join our team and drive our GCP-focused software security initiatives forward.
Photon Chennai, Tamil Nadu, IND Office
DLF IT Park 1/124 Mount Poonamallee Road Sivaji Gardens Manapakkam , Chennai, India, 600089
Similar Jobs
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Leads and develops a distributed software engineering team responsible for a customer-deployed virtual appliance. Owns engineering execution, architecture guidance, roadmap delivery, Scrum practices, reliability, incident response, vulnerability remediation, hiring, and team development. Requires technical fluency in Linux, virtualization, containers, customer-installed software, SaaS connectivity, and AI/LLM tools, while partnering closely with Product Management and cross-functional engineering teams.
Top Skills:
Ai And Llm ToolsContainerizationGoLinuxScrumVirtualization
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Develop data science and AI solutions using Python and Django, including data collection, labeling, curation, feature engineering, classical machine learning, and generative AI. Deploy models to production using CI/CD, Airflow, and MLflow; automate modeling pipelines and monitor model drift. Collaborate with stakeholders in Agile Scrum teams, improve testing and automation practices, and analyze business requirements.
Top Skills:
AgileAirflowCi/CdDjangoHadoopMlflowPandasPythonScrumSparkSQL
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Build and industrialize reliable, scalable AI solutions and production ML pipelines. Bridge data science and IT production teams, manage Python environments, data sourcing, MLOps, model deployment, Airflow orchestration, Denodo integration, CI/CD, containerization, monitoring, security, and automation. Collaborate with international teams and promote testing, code quality, and technology improvements.
Top Skills:
AgileAmazon S3Apache AirflowBashDenodo PlatformDjangoDockerElkGitlab Ci/CdGrafanaHadoopJenkinsKafkaKibanaKubeflowKubernetesLinuxMambaMicromambaMlflowMlopsPipPostgresPythonScrumSparkUvVql
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
