Senior DevSecOps & SRE Engineer (GCP)

About the role

Lumenalta is looking for a senior, hands‑on DevSecOps / Site Reliability Engineer to own security and reliability for a high‑traffic digital platform on Google Cloud. You will embed security into CI/CD, harden cloud access, and keep the platform stable from day one.

Key responsibilities

• Integrate automated security scanning, secret detection and policy‑enforcement gates into CI/CD pipelines using Wiz CNAPP.
• Review and harden GCP IAM configurations, removing over‑privileged users, service accounts and roles via Terraform.
• Configure and maintain Fastly WAF rules for scraping, abuse and edge‑level threats.
• Assist with Google Cloud Privileged Access Management (PAM) to implement just‑in‑time access.
• Own and extend Terraform IaC for GCP provisioning with security‑first constraints.
• Support Cloud Run workloads, ensuring observability and reliability without deep Kubernetes overhead.
• Implement monitoring and alerting with New Relic and GCP‑native tools, tracking SLOs and incident signals.
• Participate in incident response, on‑call rotation and broader SRE initiatives.

Required profile

• Proven production experience on Google Cloud Platform (hands‑on ownership required).
• Senior‑level DevSecOps or security‑focused SRE background.
• Ability to work independently on Jira tickets with minimal ramp‑up time.

Required skills

• Google Cloud Platform (GCP)
• Terraform
• CI/CD pipelines (Git, Jenkins, GitHub Actions, etc.)
• Wiz CNAPP
• Fastly WAF
• Google Cloud PAM (Privileged Access Management)
• Cloud Run
• New Relic
• GCP‑native monitoring and logging
• Incident response and on‑call support