GCP DevOps Engineer

Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.

As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.

More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.

At Sonatype, we empower developers with best-in-class tools to build secure, high-quality software  mission is to create a world where software is always secure and developers can innovate without fear. Trusted by thousands of organizations, including Fortune 500 companies, we are pioneers in software supply chain management, open-source security, and Dev Sec Ops .

We are looking for a GCP Dev Ops Engineer to help us shape the future of secure software development. If you love solving complex problems, working with cloud-native platforms, and mentoring engineering teams, we would love to hear from you.

As a GCP Dev Ops Engineer, you will play a critical role in designing, automating, and scaling Sonatype's engineering platform and delivery systems on GCP. You will lead infrastructure and CI/CD modernization, improve reliability and security, and guide teams on platform engineering and Dev Ops best practices.

This role helps create the engineering foundation that enables teams to ship securely, reliably, and quickly. You will influence how Sonatype scales its platform capabilities, improves developer experience, and advances its Dev Sec Ops  maturity on GCP.

You will work at the intersection of infrastructure, automation, security, and developer enablement, making a direct impact on product velocity and operational excellence.

• Design, implement, and evolve GCP-based infrastructure using Infrastructure as Code with Terraform and Google Cloud deployment automation patterns.
• Build and maintain scalable CI/CD pipelines using Cloud Build, Git Hub Actions, Jenkins, or equivalent platforms for application, infrastructure, and platform workloads.
• Administer and optimize GCP delivery workflows including Cloud Build triggers, Artifact Registry, source integrations, deployment approvals, and service account access patterns.
• Partner with engineering teams to improve build, release, and deployment workflows across microservices and cloud-native applications.
• Implement robust observability across systems using Google Cloud Operations Suite, Cloud Logging, Cloud Monitoring, and related telemetry tooling.
• Strengthen platform security by integrating secrets management, policy enforcement, vulnerability scanning, and least‑privilege access control.
• Manage and optimize containerized environments using Kubernetes, Helm, and Google Kubernetes Engine (GKE).
• Drive reliability engineering practices including incident response, root cause analysis, SLO thinking, and automated remediation where appropriate.
• Standardize reusable templates, modules, and platform patterns that improve developer productivity and consistency.
• Mentor engineers and provide technical leadership on GCP architecture, deployment automation, release governance, and Dev Sec Ops  practices.

• Strong experience in Dev Ops, platform engineering, or site reliability engineering roles supporting modern software delivery.
• Deep hands‑on expertise with Google Cloud Platform, including compute, networking, IAM, storage, monitoring, and security services.
• Strong experience with GCP‑native or integrated CI/CD pipeline design for multiple application stacks and…