This role is responsible for designing and implementing secure automation pipelines, enforcing least-privilege and Zero Trust access controls, and managing enterprise identity governance to meet both organisational and regulatory compliance requirements.

In addition to strong Entra ID expertise, the ideal candidate will bring hands-on experience with GCP pipeline deployment, infrastructure-as-code (IaC), and custom agent development to enhance cloud security observability, policy enforcement, and workload protection across cloud environments.

Responsibilities:

• Design and integrate security tooling into CI/CD pipelines using GitHub Actions and GCP Cloud Build to ensure automated code scanning, dependency security, secrets scanning, and policy enforcement.

• Develop secure, automated pipelines on the GCP platform, enabling continuous compliance validation, vulnerability scanning, and policy-as-code deployment for cloud workloads and containerised environments.

• Implement and manage emerging Microsoft Entra ID security controls, also including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Identity Governance, and adaptive MFA policies across enterprise workloads.

• Leverage emerging Entra technologies such as Entra Agent ID, Entra Workload ID, Identity Governance lifecycle workflows, and Zero-Trust deployments,to strengthen identity protection, automate governance, and modernise access strategies.

• Continuously evaluate new features in Microsoft Entra ID and GCP IAM, providing architectural recommendations and integrating relevant capabilities into enterprise DevSecOps workflows.

• Automate identity and security configuration using scripting and IaC tools such as Terraform, Ansible and ARM templates, with multi-cloud pipeline support for Azure and GCP.

• Build and maintain custom security agents and automation workflows to enhance identity telemetry, enforce real-time access policies, and standardise cloud security controls across environments.

• Conduct regular reviews of roles, permissions, service principals, workload identities, and application registration security, ensuring least-privilege access and Zero Trust alignment.

• Collaborate with engineering teams to perform secure code reviews, threat modelling, vulnerability assessments, and provide remediation guidance during development and deployment cycles.

• Develop dashboards, reports, and automation for identity compliance, audit readiness, and IAM security posture using tools like Azure Monitor, GCP Looker, Sentinel, and BigQuery.

Qualifications:

• Strong technical, troubleshooting, and strategical skills to build emerging technology solutions at scale.

• 3–6+ years of experience in DevOps, SecOps, or Cloud Security Engineering roles.

• Strong hands-on experience with Microsoft Entra ID (AuthN Protocols, Conditional Access, PIM, Identity Protection, Graph API and automation).

• Lead GCP cloud deployments and build scalable, secure automation pipelines, leveraging Cloud Build, Cloud Deploy, Artifact Registry, and GCP-native IaC to support continuous delivery, compliance automation, and multi-cloud DevSecOps workflows.

• Experience with IaC: Terraform, Bicep, or ARM templates.

• Knowledge of container security, Kubernetes, and cloud-native security patterns.

• Solid understanding of Zero Trust principles, IAM, and identity lifecycle management.

• Familiarity with vulnerability management tools and SAST/DAST integrations (42Crunch, CheckmarX and FOSSA)

• Microsoft Azure certifications (e.g., AZ-500, SC-300, AZ-104, AZ-305) are a strong plus.

XML job scraping automation by YubHub

As a senior cloud software engineer, you will design, deploy, and operate mission-critical commercial cloud infrastructure that is highly available, resilient, and scalable, with restrictions on some cloud-managed services. You will develop and maintain tooling infrastructure to build and support deployments to the cloud and on-prem. You will troubleshoot and remediate complex issues across Linux-based infrastructure. You will collaborate with software development teams to optimize containerized application deployments (RKE2). You will monitor and remediate security weaknesses and baseline regressions across infrastructure. You will serve as a subject matter expert for teams across Anduril looking to leverage Kubernetes and cloud infrastructure.

Required qualifications include a strong engineering background from industry or school with 3 - 7+ years of experience with Go, Python, Java, or other common object-oriented languages. You should have a solid understanding and practical experience with containerization technologies (Docker) and orchestration platforms (Kubernetes). You should have a strong understanding of networking concepts in a cloud environment (VPCs, subnets, routing, security groups). You should have excellent problem-solving, analytical, and critical thinking skills. You should have deep experience with architecting and securing cloud infrastructure in deployed/production environment. You should be highly proficient in multiple modern cloud providers (preferably GCP or AWS). You should have experience with Infrastructure-as-Code (preferably Terraform).

Preferred qualifications include working experience in DevOps, Security Engineering, and/or SRE roles. You should have strong Kubernetes experience. You should have extensive experience with SRE principles and practices in Kubernetes environments. You should have extensive experience across one or more managed Kubernetes offerings (Rancher, Anthos, etc.). You should have experience with hardening and monitoring Kubernetes clusters. You should have familiarity with monitoring and logging tools (e.g., Prometheus, Grafana, CloudWatch, Azure Monitor, Stackdriver). You should have experience with advanced cloud security principles and practices.

XML job scraping automation by YubHub