29 days ago
London, United KingdomSenior
Responsibilities
- Design, build, and maintain enterprise GCP environments and Sovereign Landing Zones with Terraform and Ansible.
- Manage, scale, and secure production GKE and GKE Enterprise clusters in air-gapped and low-bandwidth environments.
- Implement high-assurance security architecture, including Zero-Trust networking, Private Google Access, Service Controls, and IAM policies.
- Operate disconnected sovereign cloud nodes and manage offline container images, Helm repositories, and Terraform providers.
- Build DevSecOps pipelines with container scanning, cryptographic image signing, secret management, and automated policy enforcement.
- Configure private interconnects, firewalls, and outbound-only proxies to enforce data sovereignty and prevent exfiltration.
Requirements
- At least 3 years of production experience operating Google Cloud Platform.
- Deep expertise in Terraform, GCP networking, Kubernetes, GKE, and GKE Enterprise.
- Experience delivering cloud platforms in UK Defence, intelligence, national security, or other high-assurance environments.
- Active UK SC Clearance, ideally MoD Developed Vetting, or eligibility for DV.
- Knowledge of UK Government Security Classifications, NCSC guidelines, JSP 604, and MoD Secure by Design frameworks.
- Hands-on experience with container security, Istio, admission controllers, and air-gapped software deployments.
- Desirable qualifications include GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer, or Certified Kubernetes Administrator certifications.
- Experience with GDC air-gapped hardware or edge deployments, Kafka or Cloud Pub/Sub, and defence tactical systems is desirable.
Benefits
- Annual salary reviews, a pension contribution starting at 5% and increasing to a maximum of 8%, and Group Life Assurance.
- 25 days of annual leave plus Bank Holidays, with the option to buy or sell additional days.
- 10 paid days for Reservist Military Service and two paid volunteering days per year.
- Fully funded professional certifications, five days of paid study leave, a £500 annual Personal Choice learning fund, coaching, and team training.
- Vitality Private Medical Insurance, including Apple Watch, gym discounts, and rewards.
- Hybrid working in London with a work-from-home equipment allowance, plus Cycle to Work benefits.
Tech Stack
Categories
