Infrastructure & Security Engineer

Job Responsibilities:

• Design, provision, and manage the company's GCP infrastructure using Terraform or Pulumi (IaC)

• Manage GKE clusters and Cloud Run services hosting Node.js microservices

• Implement and enforce GCP IAM policies, VPC Service Controls, and least-privilege access

• Configure and maintain Cloud Armor (WAF/DDoS protection), Cloud CDN, and Load Balancing

• Operate GCP Security Command Center and Cloud Logging to detect, investigate, and

• respond to threats

• Manage secrets and credentials using Secret Manager; enforce key rotation policies

• Build and maintain CI/CD pipelines on Cloud Build; enforce security scanning in the build

• process

• Define and test disaster recovery and business continuity procedures

• Conduct vulnerability assessments and manage patch cycles across cloud-hosted services

• Own infrastructure uptime and on-call readiness during live events; lead post-incident reviews

Requiremsnts:

• 5+ years in cloud infrastructure or DevSecOps roles, with GCP as the primary platform

• Deep hands-on experience with GCP: GKE, Cloud Run, VPC, IAM, Cloud Armor, Secret

• Manager, Security Command Center

• Proficiency with Terraform or Pulumi for infrastructure-as-code on GCP

• Strong understanding of Kubernetes (GKE): cluster management, RBAC, network policies,

• and workload identity

• Experience securing Node.js application workloads: dependency scanning, container

• hardening, runtime protection

• Solid grasp of network security: firewalls, VPC peering, private endpoints, and TLS

• management

• Familiarity with compliance and security frameworks (ISO 27001, SOC 2, OWASP)

• Experience with SIEM integration using GCP-native logging and third-party platforms

• On-call discipline and the ability to stay calm and decisive when systems are under pressure

Job Type: Full-time

Work Location: Hybrid remote in Lagos