> Markdown version of [/jobs/ext/2022393-senior-cloud-platform-engineer](https://www.wearedevelopers.com/jobs/ext/2022393-senior-cloud-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Platform Engineer - **Company:** Zaizi - **Location:** London, UK (Remote available) - **Experience:** Expert - **Salary:** £93,255.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Access, Cloud Computing, Cloud Computing Security, Cyber Security, Domain Name System (DNS), Network Topologies, Identity and Access Management, Internetworking, Javaserver Pages, Ansible, Zero Trust Network Access, Software Deployment, Software Engineering, Data Streaming, Policy as Code, Network Switches, C4ISR, Google Cloud, Cloud Platform System, Istio, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), SC Clearance, Containerization, Kubernetes, Infrastructure Automation Frameworks, Apache Kafka, Terraform, Devsecops - **Published:** August 11, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5835474903 ## About the Role In this role, you will design, deploy, and maintain mission-critical, sovereign cloud infrastructure for sensitive national security operations. You will operate at the intersection of modern cloud-native software engineering and strict defense compliance-building automated, air-gapped platforms using Google Distributed Cloud air-gapped (GDC air-gapped) and GKE Enterprise capable of supporting tactical edge analytics and disconnected containerised workloads., 1. Defence & High-Assurance Context * Active UK SC Clearance, ideally MoD Developed Vetting or eligibility for DV. * Proven experience delivering cloud platforms within UK Defence (MoD, CSOC, DE&S), Intelligence, or National Security environments. * Working knowledge of UK Government Security Classifications (OFFICIAL-SENSITIVE / SECRET / TOP SECRET), NCSC guidelines, and JSP 604 accreditation loops. 2. GCP & Infrastructure Automation * 3+ years of production experience operating Google Cloud Platform (GCP). * Expertise in Terraform for declarative infrastructure management. * Deep understanding of GCP networking (VPC Service Controls, Cloud Interconnect, Private Service Connect, Cloud NAT, DNS). 3. Containerisation & Kubernetes * Production experience administering GKE / GKE Enterprise. * Hands-on experience with container security, Service Mesh (Istio), and admission controllers (OPA/Gatekeeper or Kyverno). * Experience managing air-gapped software deployments where continuous internet connectivity is absent., * Certifications: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer, or Certified Kubernetes Administrator (CKA). * Experience with Google Distributed Cloud air-gapped (GDC air-gapped) hardware appliances or edge deployments. * Familiarity with event streaming (Kafka, Cloud Pub/Sub) in low-bandwidth, intermittent, or limited (DIL) connectivity scenarios. * Background in Armed Forces technical branches, tactical C4ISR systems, or specialised defence consultancies. ## Description We are seeking a Senior Cloud Platform Engineer with deep expertise in Google Cloud Platform (GCP), Kubernetes, and High-Assurance UK Defence environments., * Sovereign Infrastructure as Code (IaC): Design, build, and maintain enterprise-grade GCP environments and Sovereign Landing Zones using Terraform and Ansible. * Kubernetes Orchestration: Manage, scale, and secure production GKE and GKE Enterprise clusters in air-gapped or low-bandwidth environments. * High-Assurance Security Architecture: Implement Zero-Trust network topologies, Private Google Access, Service Controls, and IAM policies aligned with NCSC Cloud Security Principles, JSP 604, and MoD Secure by Design (SbD) frameworks. * Air-Gapped & Edge Deployments: Operate fully disconnected, sovereign cloud nodes (GDC air-gapped) and handle offline artifact management (e.g., container image mirroring, local Helm repositories, offline Terraform providers). * DevSecOps & Policy-as-Code: Build secure CI/CD pipelines incorporating container scanning, cryptographic image signing, secret management (Vault/GCP KMS), and automated policy enforcement (OPA/Gatekeeper). * Data Sovereignty & Isolation: Configure private interconnects, network firewalls, and outbound-only proxies to guarantee strict data sovereignty and prevent data exfiltration. ## Related Videos - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)