System Maintenance & Health: Manage, monitor, and optimise cloud infrastructure (compute, networking, IAM, storage, and database services), with a primary focus on GCP.
Escalation: Provide advanced troubleshooting and incident resolution for complex cloud infrastructure issues.
Operational Oversight: Maintain infrastructure uptime, disaster recovery (DR) posture, automated backups, and cost optimisation.
SDLC Operational Support: Support engineering teams in deploying code within established SDLC guardrails and CI/CD pipelines.
ISMS Integration: Act as the primary technical hands-on lead within the Information Security Management System (ISMS) team.
ISO 27001 Compliance: Enforce controls, gather audit evidence, conduct access reviews, and maintain compliance artifacts for annual ISO 27001 certifications.
Vulnerability & Threat Management: Perform vulnerability scans, patch management, and remediation across cloud assets; monitor security tools (e.g., GCP Security Command Center).
Access & Governance: Audit and manage Identity and Access Management (IAM), Least Privilege access, and network security policies (VPC, firewalls).
ISO 27001 Compliance Rate: Zero high-risk non-conformities during internal and external audits.
Uptime & SLA Adherence: Maintenance of core cloud infrastructure availability targets.
Incident Response & MTTR: Mean Time to Resolution for Tier 3 security and infrastructure incidents.
SDLC Compliance: 100% compliance of deployed environments with secure SDLC guidelines.
Cloud Infrastructure Expertise: Experience administering and securing cloud environments. GCP is preferred, but experience with AWS or Azure is equally relevant.
Security & Governance: Background working within an ISO 27001, SOC 2, or NIST compliant framework.
Infrastructure as Code (IaC): Familiarity with Terraform or scripting tools for infrastructure management.
Monitoring & Logging: Exposure to cloud logging, monitoring solutions, or SIEM tooling.
Google Cloud Certified Professional Cloud Security Engineer / Cloud Engineer
AWS / Azure Security or Administrator Certifications
ISO 27001 Lead Implementer / Auditor or CompTIA Security+
You'll apply on Hire Resolve's own site before 6 November 2026. Put your most relevant experience at the top of your CV first.
Apply NowReal employers never ask you to pay to apply. How to spot a job scam