Contract Cloud Security Engineer / DevSecOps

Hiring: Contract Cloud Security Engineer (GCP / GKE / Terraform) - DevSecOps

A venture-backed technology company is running a focused SOC 2 infrastructure buildout and needs a senior, hands-on contractor to deliver it. The backlog is already written: around 18 detailed tickets, ready to estimate against.

This is a hands-on delivery role focused on:

• Datadog Cloud Security: CSPM, container security, Cloud SIEM and detection rules
• Shipping GCP audit, data access and VPC flow logs into Datadog
• GKE and Kubernetes hardening: Pod Security Standards, NetworkPolicies, RBAC
• GitHub security hardening: Actions, branch protection, audit log streaming
• Backup and DR in Terraform, supply chain security (cosign, Binary Authorization) and Cloud Armor

You would work directly with the Head of Engineering and platform team, in their Linear and repos, raising PRs into their Terraform and GitOps stack. Audit evidence matters as much as the technical change.

Why it's interesting:

• Fixed, well-defined scope with a detailed ticket backlog, not an open-ended engagement
• Direct working relationship with the engineering leadership, no account managers in between
• Real security engineering across the full stack: cloud, Kubernetes, CI/CD and supply chain
• A strong fit for an independent contractor who wants focused, meaningful delivery work

Location: Remote Engagement, 3-month contract, Outside IR35

If you write Terraform, harden Kubernetes clusters and have shipped compliance-oriented controls before, this will suit you. GRC-only consultants and MSPs need not apply.