Note: The job is a remote job and is open to candidates in USA. The client is a U.S.-based provider of CCaaS, AI/ML, and cloud solutions, delivering implementation, consulting, managed services, and product development. The GCP Cloud Engineer will design and secure enterprise Google Cloud landing zones, implement infrastructure and security automation, and advise clients and internal teams on reliable, compliant cloud deployments.
Responsibilities
- GCP Architecture: Design and configure secure, enterprise-ready GCP landing zones to support PoC's, Pilots, and full-scale deployments without requiring future migrations
- Domain Expertise: Provide specialized knowledge in IAM and Cloud Networking
- Advisory & Collaboration: Lead workshops with cross-functional client teams to review current setups, ensure adherence to best practices, and provide official strategic recommendations
- Security & Compliance: Ensure all platform enablement strictly follow established enterprise security policies and procedures
- Develop and enforce cloud security baselines, guardrails, and governance policies across GCP organizations, folders, and projects
- Implement and manage Infrastructure as Code (IaC) for cloud foundations, including VPC architecture, shared services, and connectivity patterns
- Integrate security tooling and controls into CI/CD pipelines (shift-left security), including static analysis, secrets detection, container scanning, and policy enforcement
- Lead the design and implementation of Zero Trust network architecture, identity federation, and least privilege access models
- Define and manage Security Command Center (SCC), Chronicle SIEM, and other GCP-native security tooling for continuous monitoring and threat detection
- Conduct threat modeling, risk assessments, and security reviews for new infrastructure patterns and cloud-native services
- Collaborate with compliance teams to maintain alignment with frameworks such as CIS Benchmarks, NIST 800-53, SOC 2, FedRAMP, or equivalent
- Automate security and compliance controls using policy-as-code tools (OPA/Rego, Terraform Sentinel, Forseti/Config Validator)
- Respond to and remediate security incidents, vulnerabilities, and misconfigurations across the cloud estate
- Mentor teams on cloud security best practices and drive a culture of shared security ownership
- Lead development and maintenance of standardization templates to be used for discovery by sales and implementation teams in ensuring client security requirements are well documented
Skills
- • 3+ years of experience in DevOps, cloud engineering, or platform/infrastructure engineering roles
- • 3+ years of hands-on experience with Google Cloud Platform (GCP), with a focus on foundations, networking, and security
- • Demonstrated experience designing and deploying enterprise GCP Landing Zones (Google Cloud Foundation Toolkit, CFT, or equivalent)
- • Strong background in cloud security architecture, identity & access management (IAM), and network security design
- • Proven experience integrating security into CI/CD workflows and automating policy enforcement
- • Experience working within regulated environments or with compliance frameworks (SOC 2, NIST, CIS, ISO 27001, or FedRAMP)
- • GCP Organization hierarchy design (Org → Folders → Projects) including Assured Workloads folders
- • Shared VPC, VPC Service Controls, and Private Service Connect
- • Resource hierarchy and inheritance model for policies and billing
- • Cloud Foundation Toolkit (CFT) and/or Fabric FAST landing zone blueprints
- • Google Cloud's Architecture Framework and Well-Architected principles
- • IAM design: service accounts, Workload Identity Federation, custom roles, and least-privilege enforcement
- • Cloud Armor (WAF/DDoS), BeyondCorp Enterprise, and context-aware access
- • Data security: CMEK, Cloud HSM, Secret Manager, DLP API
- • Security Command Center (SCC) Premium — findings, threat detection, compliance dashboards
- • Chronicle SIEM and Security Operations (SecOps) integrations
- • Binary Authorization and supply chain security (SLSA, Sigstore)
- • Audit logging strategy: Cloud Audit Logs, log sinks, and retention policies
- • Terraform (advanced): modules, workspaces, remote state, Sentinel policies
- • GitOps workflows: ArgoCD, Flux, or equivalent
- • Policy-as-Code: OPA/Rego, Checkov, tfsec, KICS
- • Google Kubernetes Engine (GKE): hardening, Autopilot, node pool design
- • Container security: Artifact Registry scanning, Distroless images, Pod Security Standards
- • VPC design: subnets, firewall rules, hierarchical firewall policies
- • Cloud NAT, Cloud DNS, Private Google Access
- • Hybrid connectivity: Cloud Interconnect, HA VPN, Network Connectivity Center
- • Network Intelligence Center and packet mirroring
- Cloud Platform Google Cloud Platform (GCP)
- IaC Terraform, Cloud Deployment Manager
- Security Scanning Checkov, tfsec, Trivy, Snyk, Semgrep
- Policy & Governance OPA/Rego, Sentinel, Forseti, Config Validator
- Monitoring & SIEM Chronicle, Security Command Center, Cloud Monitoring, Splunk
- Container Orchestration GKE, Anthos, Docker
- Secrets Management Secret Manager, HashiCorp Vault
- Identity & Access Cloud IAM, Workload Identity Federation, Active Directory
- Version Control GitLab, Bitbucket
- Languages/Scripting Python, Bash
- • Experience with multi-cloud or hybrid connectivity (GCP Interconnect, VPN, SD-WAN)
- • Background in SRE practices — SLOs, incident response, and chaos engineering
- • Contributions to open-source security or DevOps tooling
- • Familiarity with Google Assured Workloads or sovereign cloud requirements
- • Prior experience in financial services, healthcare, or government-regulated industry
- • HIPAA
- • Confidential Computer Information
- • Google Cloud Professional Cloud Security Engineer (highly preferred)
- • Google Cloud Professional Cloud Architect
- • Certified Kubernetes Security Specialist (CKS)
- • AWS Certified Security Specialty or Azure Security Engineer (beneficial for multi-cloud context)
- • CISSP, CCSP, or equivalent security certification
Benefits
- Fully remote work arrangement
Company Overview