GCP Cloud Security Engineer

Cloud Security Engineer (GCP/IAM/Encryption) – Contract

Rate: £600 day Outside IR35

Location: London – hybrid (3 days onsite) – Non negotiable

Duration: 12 month

Clearance: Active SC, willingness for DV

Join a high-impact programme delivering secure, large-scale cloud infrastructure within a UK government environment. You'll help design and secure a private/distributed cloud platform supporting critical national services.

• Design & implement secure workloads in Google Distributed Cloud (GDC)/GCP (GDC experience not necessarily needed but would be strongly desired)
• Build and manage IAM architectures (SSO, MFA, privileged access life cycle)
• Enforce least privilege via resource hierarchies, policies, and constraints
• Configure network security controls (Firewalls, WAF, service perimeters)
• Deliver data protection & encryption (KMS, CMEK/EKM, sensitive data handling)
• Secure CI/CD pipelines with vulnerability scanning and policy enforcement

• Strong experience in cloud security engineering (GCP preferred; other CSPs considered)
• Proven IAM, network security, and compliance implementation
• Experience securing workloads in restricted/air-gapped/high-assurance environments
• Ability to translate cloud-native security practices to distributed/edge platforms

• GCP Professional Cloud Security Engineer certification
• Experience in UK Gov secure environments (SC/DV, SECRET+)
• Familiarity with GDS standards or public sector delivery

Please note this role will require you to undergo DV clearance. If you currently hold ACTIVE SC clearance and match the above requirements please reach out.