Zaizi
Senior Cloud Platform Engineer
London
Posted about 14 hours ago
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Role Overview
We are seeking a Senior Cloud Platform Engineer with deep expertise in Google Cloud Platform (GCP), Kubernetes, and High-Assurance UK Defence environments.
In this role, you will design, deploy, and maintain mission-critical, sovereign cloud infrastructure for sensitive national security operations. You will operate at the intersection of modern cloud-native software engineering and strict defense compliance—building automated, air-gapped platforms using Google Distributed Cloud air-gapped (GDC air-gapped) and GKE Enterprise capable of supporting tactical edge analytics and disconnected containerised workloads.
Key Responsibilities
- Sovereign Infrastructure as Code (IaC): Design, build, and maintain enterprise-grade GCP environments and Sovereign Landing Zones using Terraform and Ansible.
- Kubernetes Orchestration: Manage, scale, and secure production GKE and GKE Enterprise clusters in air-gapped or low-bandwidth environments.
- High-Assurance Security Architecture: Implement Zero-Trust network topologies, Private Google Access, Service Controls, and IAM policies aligned with NCSC Cloud Security Principles, JSP 604, and MoD Secure by Design (SbD) frameworks.
- Air-Gapped & Edge Deployments: Operate fully disconnected, sovereign cloud nodes (GDC air-gapped) and handle offline artifact management (e.g., container image mirroring, local Helm repositories, offline Terraform providers).
- DevSecOps & Policy-as-Code: Build secure CI/CD pipelines incorporating container scanning, cryptographic image signing, secret management (Vault/GCP KMS), and automated policy enforcement (OPA/Gatekeeper).
- Data Sovereignty & Isolation: Configure private interconnects, network firewalls, and outbound-only proxies to guarantee strict data sovereignty and prevent data exfiltration.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required Experience
Defence & High-Assurance Context
- Active UK SC Clearance, ideally MoD Developed Vetting or eligibility for DV.
- Proven experience delivering cloud platforms within UK Defence (MoD, CSOC, DE&S), Intelligence, or National Security environments.
- Working knowledge of UK Government Security Classifications (OFFICIAL-SENSITIVE / SECRET / TOP SECRET), NCSC guidelines, and JSP 604 accreditation loops.
GCP & Infrastructure Automation
- 3+ years of production experience operating Google Cloud Platform (GCP).
- Expertise in Terraform for declarative infrastructure management.
- Deep understanding of GCP networking (VPC Service Controls, Cloud Interconnect, Private Service Connect, Cloud NAT, DNS).
Containerisation & Kubernetes
- Production experience administering GKE / GKE Enterprise.
- Hands-on experience with container security, Service Mesh (Istio), and admission controllers (OPA/Gatekeeper or Kyverno).
- Experience managing air-gapped software deployments where continuous internet connectivity is absent.
Desirable Qualifications
- Certifications: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer, or Certified Kubernetes Administrator (CKA).
- Experience with Google Distributed Cloud air-gapped (GDC air-gapped) hardware appliances or edge deployments.
- Familiarity with event streaming (Kafka, Cloud Pub/Sub) in low-bandwidth, intermittent, or limited (DIL) connectivity scenarios.
- Background in Armed Forces technical branches, tactical C4ISR systems, or specialised defence consultancies.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits
- Competitive Pay: Salaries reviewed annually to ensure they reflect your performance and market value.
- Loyalty Pension: We invest in your future. Starting at a 5% employer contribution, we increase this by 0.5% every year after your third anniversary, up to a maximum of 8%.
- Protection: Comprehensive Group Life Assurance for peace of mind.
Purpose & Culture
- Real Impact: Work on mission-critical projects that secure and improve the UK's digital infrastructure.
- Autonomy: A culture that empowers you to make decisions, prototype rapidly, and iterate towards success.
- Service & Community: We support those who serve. 10 paid days for Reservist Military Service.
Work / Life Balance
- Time Off: 25 days annual leave + Bank Holidays, with the flexibility to Buy/Sell additional days to suit your lifestyle.
- Giving back: 2 paid volunteering days per year.
Development & Growth
- Master Your Craft: Fully funded professional certifications (AWS, GCP, Agile, etc.) supported by 5 days paid study leave.
- Expand Your Horizons: An additional £500 annual "Personal Choice" fund to learn whatever inspires you—work-related or not.
- Support: Access to 1-2-1 professional coaching and team training to accelerate your career.
Health & Balance
- Premium Health: Vitality Private Medical Insurance (includes Apple Watch, gym discounts, and rewards).
- Flexibility: Genuine hybrid working with a WFH equipment allowance to perfect your home setup.
- Wellbeing: Cycle to Work scheme and a commitment to sustainable, healthy working practices.
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Google Cloud Platform
Kubernetes
Terraform
Ansible
GKE Enterprise
Infrastructure as Code
Zero-Trust architecture
DevSecOps
CI/CD pipelines
Container security
Istio
Policy-as-Code
Data sovereignty
Air-gapped systems
IAM policies
Network security
Location