DevSecOps / Sovereign Cloud Engineer (Site Reliability)

About the role

We are seeking a skilled DevSecOps / Sovereign Cloud Engineer with 5‑10 years of experience to design, operate, and secure regulated cloud environments on AWS and Google Cloud. The position blends cloud operations, security engineering and Site Reliability Engineering, covering Kubernetes management, Infrastructure as Code, CI/CD automation and secrets management.

Key responsibilities

• Deploy, manage and maintain sovereign cloud platforms on AWS/GCP, ensuring regulatory and data‑residency compliance.
• Operate Kubernetes clusters, handling upgrades, scaling and workload optimisation.
• Lead security incident response, investigate and remediate cloud security incidents and vulnerabilities.
• Implement and tune security tools, automate policy‑driven responses and promote DevSecOps practices.
• Develop and maintain Infrastructure as Code using Terraform and automate deployments with Git/GitLab pipelines.
• Manage secrets and access controls with HashiCorp Vault, including rotation and token lifecycle.
• Monitor system health with Datadog, define SLIs/SLOs and drive continuous reliability improvements.
• Handle 24×7 alerting and incident management via PagerDuty, performing root‑cause analysis and contributing to change management.

Required profile

• 4‑5 years of hands‑on experience in DevSecOps or SRE roles, with proven Kubernetes management.
• Strong understanding of cloud security principles (IAM, encryption, network and container security).
• Experience with incident, change and problem management processes.
• Solid networking knowledge (TCP/IP, DNS, load balancing, firewalls, VPNs, private endpoints) in regulated environments.
• Ability to lead incident bridges during P1/P2 outages and deliver clear RCA.

Required skills

• AWS and Google Cloud Platform
• Kubernetes
• Terraform
• Git and GitLab CI/CD
• HashiCorp Vault
• Datadog
• PagerDuty
• Confluence
• Python and Bash scripting
• Ansible
• Cloud security (IAM, encryption, network security)
• Networking fundamentals (TCP/IP, DNS, load balancing, firewalls, VPNs)