DevSecOps SR - GCP

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a DevSecOps SR - GCP based in Brazil. This is a senior DevSecOps opportunity focused on building and evolving secure, reliable, and scalable cloud infrastructure on Google Cloud Platform. You will take ownership of GCP environments, Kubernetes platforms, infrastructure as code, security controls, and operational automation. The role combines cloud engineering, security, observability, reliability, and cost optimization in a modern infrastructure environment. You will help establish engineering standards around IAM, networking, deployments, secrets management, and least-privilege access. Your work will directly contribute to platform resilience, secure software delivery, and improved developer productivity. You will also partner with engineering teams to define reliability objectives, investigate incidents, and eliminate recurring operational issues. This is a strong opportunity for a senior professional who enjoys technical ownership, automation, and solving complex infrastructure challenges. Design, implement, maintain, and continuously improve cloud infrastructure and platform services on Google Cloud Platform. Administer and evolve Kubernetes environments using GKE, as well as Cloud Run and other managed cloud services. Build reusable Terraform modules and establish infrastructure-as-code standards that support scalable and consistent environments. Define and implement secure patterns for networking, IAM, Service Accounts, Workload Identity, secrets management, and environment segregation. Apply least-privilege principles and security controls across cloud infrastructure, container images, workloads, and runtime environments. Establish secure deployment mechanisms between CI/CD pipelines and production workloads, supporting reliable software delivery. Implement and improve infrastructure and service observability through metrics, logs, tracing, dashboards, and alerts. Support engineering teams in defining SLIs, SLOs, alerting strategies, capacity planning, and operational reliability practices. Automate infrastructure provisioning, configuration management, and recurring operational activities using appropriate scripting and programming tools. Investigate incidents, perform root-cause analysis, and implement corrective measures to prevent recurring failures. Monitor platform costs, capacity, availability, performance, and operational risks, identifying opportunities for optimization. Document infrastructure standards, architectural decisions, security practices, and operational procedures while guiding engineering teams toward safe and effective cloud usage. Requirements: Proven hands-on experience with Google Cloud Platform in production environments. Strong knowledge of GKE and Kubernetes, including the operation and security of containerized workloads. Solid experience with Terraform and infrastructure-as-code practices. Strong understanding of IAM, Service Accounts, Workload Identity, Secret Manager, and cloud security principles. Practical experience with GCP networking, including VPCs, firewalls, DNS, and load balancing. Experience with Docker and deploying and operating containerized applications. Experience with observability, monitoring, alerting, incident response, and troubleshooting of production environments. Knowledge of high availability, scalability, backup strategies, disaster recovery, and reliability engineering. Experience automating infrastructure and operational tasks with Bash, Python, Go, or similar technologies. Strong understanding of DevSecOps principles applied to infrastructure, cloud environments, and application runtime. Experience with Cloud SQL, Pub/Sub, Memorystore, or Artifact Registry is a plus. Familiarity with Datadog, OpenTelemetry, Policy as Code tools such as OPA or Gatekeeper, and Kubernetes hardening is desirable. Knowledge of SBOMs, image signing, softwar