DevSecOps Engineer (GCP)

Location: Belgrade or Lisbon; on-site

Company

hirify.global provides commerce, liveops automation, community engagement, and payments infrastructure for video games.

What you will do

• Own cloud security on GCP, including IAM, organization policies, network security, and Cloudflare edge protection.
• Harden GKE clusters and the container supply chain.
• Build automated SAST, dependency, container, and IaC security checks into CI/CD pipelines.
• Manage secrets, least-privilege access, vulnerability remediation, and cloud security posture.
• Build security monitoring and lead incident response.
• Implement controls and prepare evidence for SOC 2 Type 2 and PCI DSS Level 1.

Requirements

• 5+ years of experience in DevSecOps, cloud security, or security-focused DevOps or platform engineering.
• Strong production experience with GCP; AWS or Azure experience is also acceptable.
• Hands-on experience securing Kubernetes and Terraform-managed infrastructure.
• Practical knowledge of CI/CD security, cloud IAM, secrets management, vulnerability management, and security monitoring.
• Ability to build security practices from scratch and drive adoption across engineering teams.
• Strong English communication skills and availability for on-site work in Belgrade or Lisbon.

Nice to have

• Experience with Cloudflare, Datadog, Wiz, Drata, or GitHub Actions.
• Previous SOC 2 or PCI DSS audit experience.
• Background in payments, gaming, or high-load products.

Culture & Benefits

• Work with experienced professionals across global locations.
• High-growth environment with rapid product delivery and measurable impact.
• Autonomy, ownership, and decision-making responsibility.
• Use modern tools, AI, and automation in daily work.
• Equity participation in the company's growth and long-term success.