Senior DevSecOps Lead

Senior DevSecOps LeadPosition SummaryWe are seeking a Senior DevSecOps Lead to provide technical leadership across DevSecOps, cloud engineering, CI/CD, infrastructure automation, cloud security, IAM, networking, and modern data platforms. This role requires a hands-on technical leader who can architect and implement secure, scalable GCP environments while establishing enterprise standards for automation, deployment, and infrastructure management.The ideal candidate brings strong experience with GCP, GitLab CI/CD, Terraform, IAM, cloud networking, SecOps, lakehouse architectures, Apache Iceberg, BigQuery, and Starburst/Trino.Key ResponsibilitiesLead the architecture, implementation, and optimization of DevSecOps and CI/CD pipelines using GitLab CI/CD.Establish GitLab branching, Merge Request (MR), code-review, approval, deployment, rollback, and release-management standards.Build and maintain automated deployment pipelines across development, test, staging, and production environments.Design and manage Infrastructure as Code (IaC) using Terraform, including reusable modules, state management, and automated infrastructure provisioning.Lead GCP cloud engineering initiatives focused on scalability, reliability, security, and operational efficiency.Design and implement cloud networking including VPCs, VPC Service Controls, security perimeters, firewalls, load balancers, DNS, private connectivity, and TLS/SSL certificates.Implement enterprise IAM strategies, including role-based access, least privilege, service-account provisioning, workload identity, and access governance.Partner with SecOps teams to integrate vulnerability management, security scanning, monitoring, incident response, and security controls into the software delivery lifecycle.Lead infrastructure and platform engineering for lakehouse and data-engineering environments.Support GCS, BigQuery, Apache Iceberg, lakehouse runtimes, data catalogs, and database integrations.Architect and support Starburst Enterprise Platform (SEP) / Starburst Galaxy, including Trino query engines, Unified Access Tier, data virtualization, and federated data access.Integrate Starburst/Trino with Iceberg, BigQuery, GCS, databases, and enterprise data sources.Provide technical leadership, mentoring, architecture guidance, code reviews, and production support across DevOps, Security, Cloud, and Data Engineering teams.Drive automation, standardization, platform reliability, security posture, and continuous improvement.Required Technical SkillsDevSecOps / CI/CDGitLab, GitLab CI/CD, Git, Merge RequestsCI/CD pipeline architecture and deployment automationSecurity scanning and DevSecOps practicesCloud / InfrastructureGoogle Cloud Platform (GCP)Terraform / Infrastructure as CodeIAM, service accounts, workload identityVPC, VPC Service Controls, security perimetersFirewalls, load balancers, DNS, private connectivityTLS/SSL certificates and certificate lifecycle managementSecurityCloud security architectureSecOps and vulnerability managementLeast-privilege access and security controlsSecurity automation and compliance practicesData / LakehouseGCS and BigQueryApache IcebergLakehouse architecture and runtimesData catalogsDatabase integration and connectivityStarburst Enterprise / Starburst GalaxyTrinoQuery engines and distributed data processingUnified Access TierData virtualization and federated data accessQualifications10+ years of experience in DevOps, Cloud Engineering, SRE, Infrastructure, or related engineering disciplines.3+ years in a senior/lead DevSecOps, Cloud Engineering, or Platform Engineering capacity.Strong hands-on experience designing and implementing enterprise GCP environments.Proven experience leading cloud infrastructure automation using Terraform.Strong understanding of cloud security, networking, IAM, and enterprise architecture.Experience working across Security, DevOps, Data Engineering, Application Development, and Architecture teams.Demonstrated ability to lead technical initiatives while remaining hands-on with engineering and troubleshooting.GCP, Terraform, Kubernetes, Security, or DevSecOps certifications are a plus.