Senior DevSecOps / Site Reliability Engineer (GCP)

About the role

Lumenalta is looking for a senior DevSecOps / Site Reliability Engineer to join a high‑traffic, mission‑driven digital platform hosted on Google Cloud Platform. The role combines security hardening, infrastructure automation, and reliability engineering, allowing you to ship security controls from day one while supporting the platform’s ongoing stability.

Key responsibilities

• Integrate automated security scanning, secret detection, and policy‑enforcement gates into CI/CD pipelines using Wiz CNAPP.
• Review and tighten GCP IAM configurations, removing excess permissions and applying least‑privilege principles via Terraform.
• Configure and maintain Fastly WAF rules to mitigate scraping, abuse, and edge‑level threats.
• Assist with Google Cloud Privileged Access Management, establishing just‑in‑time access workflows.
• Own and extend Terraform IaC for GCP provisioning, ensuring version‑controlled, secure changes.
• Support Cloud Run workloads, contributing to deployment, observability, and reliability without heavy Kubernetes overhead.
• Implement observability and alerting using New Relic and native GCP tools, maintaining SLO tracking and incident detection.
• Participate in SRE activities such as incident response, on‑call support, and platform hardening.

Required profile

• Extensive hands‑on experience managing production environments on GCP.
• Proven senior‑level DevSecOps or security‑focused SRE background.
• Ability to work independently on Jira tickets with strong ownership.

Required skills

• Google Cloud Platform (GCP)
• Terraform
• CI/CD pipeline security integration
• Wiz CNAPP
• Fastly WAF
• Google Cloud Privileged Access Management
• Cloud Run
• New Relic
• Jira