Senior DevSecOps / Site Reliability Engineer (GCP)

About the role

Lumenalta is looking for a senior, hands‑on DevSecOps / Site Reliability Engineer to support a high‑traffic, mission‑driven digital platform on Google Cloud Platform. You will embed security into the CI/CD pipeline, harden cloud access, and ensure the platform remains reliable and secure from day one.

Key responsibilities

• Integrate security scanning, vulnerability management, secret scanning and branch protection into CI/CD pipelines using Wiz (CNAPP).
• Review and harden GCP IAM configurations for least‑privilege access, remediating over‑permissioned identities via Terraform.
• Configure and maintain Fastly WAF rules to mitigate scraping, abuse and edge‑level threats.
• Assist with Google Cloud Privileged Access Management (PAM) implementation, establishing just‑in‑time access workflows.
• Own and extend Terraform IaC for GCP provisioning with security‑first constraints.
• Support Cloud Run workloads, contributing to deployment, observability and reliability without deep Kubernetes overhead.
• Implement and maintain observability and alerting using New Relic and GCP‑native tools.
• Participate in SRE activities: incident response, on‑call support, reliability improvements and platform hardening.
• Execute Jira tickets independently with strong ownership.

Required profile

• Extensive production experience on Google Cloud Platform (hands‑on ownership required).
• Senior DevSecOps or security‑focused SRE background.
• Proven ability to work autonomously in a fast‑moving engineering environment.
• Strong ownership mindset and ability to deliver results from day one.

Required skills

• Google Cloud Platform (GCP)
• Terraform
• CI/CD pipelines
• Wiz (CNAPP) security platform
• Fastly WAF
• Google Cloud Privileged Access Management (PAM)
• Cloud Run
• New Relic
• Jira