GCP DevSecOps Engineer

About Earning Curve LLP:

Earning Curve LLP is a forward-thinking technology consulting firm delivering secure, scalable, and cloud-native solutions across industries. We are in the process of building a world-class engineering team in India to support our global operations, with a strong emphasis on automation, cloud security, and enterprise-grade DevOps practices. As we grow, we’re looking for exceptional talent that thrives in fast-paced, high-impact environments and takes ownership from day one.

Role Overview:

We are seeking an experienced DevSecOps Engineer (GCP) who not only has strong hands-on expertise with cloud and security automation but also a deep conceptual understanding of core DevOps principles—scalability, reliability, automation, shift-left security, and CI/CD maturity models. The right candidate should be able to connect day-to-day implementation to architecture-level reasoning and governance frameworks.

Key Responsibilities:

• Architect & implement secure GCP network infrastructure, including VPCs, DMZs, subnets, firewall rules, Cloud NAT, VPNs, and interconnects, with a focus on resilience and compliance.
• Design, build, and maintain CI/CD pipelines with embedded security (GitHub Actions, Jenkins, or similar), ensuring adherence to DevOps maturity models.
• Automate provisioning & management of cloud resources via Terraform, Ansible, or GCP Deployment Manager, with an emphasis on reproducibility and auditability.
• Manage and optimize GCP services (IAM, Pub/Sub, GKE, Cloud Run, Functions, Secret Manager, Monitoring/Logging) while enforcing least-privilege access and organizational policy standards.
• Integrate DevSecOps practices across the SDLC, including vulnerability scanning, secrets management, container security, and policy-as-code.
• Develop monitoring and auditing frameworks using Cloud Logging, Cloud Monitoring, custom alerting, and SIEM integration for proactive risk identification.
• Partner with cross-functional teams to align security, compliance, and DevOps principles with business goals.

Requirements:

• 2+ years of hands-on experience in DevSecOps, Cloud Infrastructure, or SRE roles.
• Strong conceptual and practical understanding of DevOps fundamentals, including CI/CD pipelines, IaC, configuration management, cloud-native security, observability, and release strategies.
• Proven expertise in GCP services, with the ability to design, deploy, secure, and troubleshoot enterprise-grade cloud solutions.
• Hands-on proficiency in Terraform, Ansible, or equivalent IaC tools.
• Experience in securing and orchestrating containerized workloads (Kubernetes/GKE, Docker).
• Solid knowledge of cloud networking, IAM, and security controls, including zero trust and defense-in-depth approaches.
• Strong scripting/programming experience (Python, Bash, Shell, Node.js, or Java) to support automation and integrations.

Preferred Qualifications :

• GCP Certifications (Professional Cloud Security Engineer, Professional Cloud DevOps Engineer, or Architect).
• Background in regulated industries (healthcare, finance, etc.) with understanding of compliance frameworks (HIPAA, PCI-DSS, SOC2, GDPR).
• Familiarity with DevOps culture practices such as trunk-based development, DORA metrics, error budgets, incident management, and shift-left testing.