Required Skills & Experience
- 5-10 years of hands-on cloud engineering, with deep expertise in Google Cloud Platform (GCP).
- Proven experience hardening cloud environments to CIS Benchmarks for GCP.
- Track record establishing policies and guardrails across a hyperscaler (org policies, policy-as-code, continuous compliance).
- Strong CI/CD command, building and hardening pipelines in partnership with development teams.
- Advanced automation and Infrastructure as Code, primarily Terraform.
- GCP OS patch management, coordinating server patching with the platform team.
- GCP identity and security services: IAM, VPC/firewall, KMS/Secret Manager, logging and monitoring.
- Proficiency in Python and Bash for automation and reporting.
Nice to Have Skills & Experience
- Ansible for configuration management and patch orchestration
- Hyperscaler certifications (AWS, Google Cloud, and/or Azure).
- HashiCorp Terraform Associate or equivalent IaC certification.
- CSPM and vulnerability tooling (Security Command Center, Security Hub, Wiz, Prisma Cloud, Tenable, or Qualys).
- Container and image scanning (Trivy, Aqua, Artifact Registry / ECR) and Kubernetes hardening.
- Knowledge of the security “color wheel” model and Green / Purple Team frameworks.
Job Description
Insight Global is seeking an experienced GCP Cloud Engineer to serve as a core member of a Security Green Team – the function responsible for translating vulnerability and misconfiguration findings into durable, automated remediation that is embedded into how cloud infrastructure is built and maintained. Moving beyond a reactive, manual approach to patching, this individual will own the configuration remediation pipeline for the Google Cloud estate: codifying fixes as infrastructure as code, automating patch and image lifecycle management, hardening cloud baselines against CIS benchmarks, and enforcing policies and guardrails through policy-as-code. This is a hands-on engineering position in which architects establish strategic direction and the engineer executes against it. As the organization’s Google Cloud footprint continues to mature, the successful candidate should anticipate a significant volume of foundational hardening work.
Key Responsibilities:
- Assess the current GCP and broader cloud environment to identify hardening and configuration gaps.
- Validate that guardrails are in place and meet CIS benchmarks.
- Design and implement policy enforcement and guardrails across GCP via policy-as-code and continuous compliance scanning.
- Codify fixes and standards as Infrastructure as Code (Terraform) so misconfigurations do not reappear downstream.
- Build and harden CI/CD pipelines with development teams, integrating security and policy gates.
- Prepare the environment for forthcoming container and Kubernetes workloads as the Kubernetes platform team engages.
- Coordinate server patching and lifecycle management with the platform and Linux teams.
- Maintain dashboards and reporting on security posture, remediation velocity, and cloud risk.