Cloud Security Engineer GCP / Terraform / Policy-as-Code

In-depth understanding of Public Cloud native offerings related to Compute, Storage, Data, Telephony, Agentic AI and underlying architectures for troubleshooting, reproducing, and determining the root cause for customer-reported issues and enabling policies. Google Cloud Security & Infrastructure - Strong experience with GCP services including IAM, VPC, Cloud Logging, Security Controls, Compute, and Storage, with a solid understanding of cloud-native architecture and security.

Our client, a IT Services and Consulting company, is looking for a Cloud Security Engineer – GCP / Terraform / Policy-as-Code for their Phoenix, AZ/ Hybrid location.
 
Responsibilities:

• Evaluating the cloud native offerings and documenting controls, standards, processes, and procedures
• Perform feasibility of study to define the convert the controls into scope for policy as a code enablement
• Define and developing policy-as-code frameworks (e.g., Sentinel and cloud native) for Infrastructure-as-Code deployment pipeline (e.g., Terraform)
• Improve PaC (policy-as-code) and guardrails (Sentinel, native cloud policies) by closely working with CNAPP to enforce secure-by-default configurations across cloud platforms

 
Requirements:

• Bachelor"s or master’s degree in computer science, computer engineering, or other technical discipline, or equivalent work experience
• 1-5 + years of experience with Google Cloud Infrastructure foundational capabilities IAM, VPC, Cloud Logging, Security controls, Storage and Compute
• 1-5 + years of experience with Policy as a Code (Sentinel), Infrastructure automation tools (Terraform) and with a focus on implementing security controls for all type of cloud native infrastructure
• In-depth understanding of Public Cloud native offerings related to Compute, Storage, Data, Telephony, Agentic AI and underlying architectures for troubleshooting, reproducing, and determining the root cause for customer-reported issues and enabling policies
• Understanding of cloud architecture to ensure high availability while ensuring the highest level of security and visibility
• Experience with Network Isolation, Data Security, Identity, Logging and Monitoring tools such as Cloud logging, metrics, XQL and other mechanism
• FinOps (cloud) domain knowledge preferred
• Software development experience in one of the OO programming language: Java, Go and or Python
• Ability to effectively interpret technical and business objectives and challenges and articulate solutions
• Willingness to learn new technologies quickly and exploit them to their optimal potential
• Act as consultant and subject matter expert for internal stakeholders in engineering, sales, customer organizations to resolve technical deployment obstacles and improve Google Cloud Infrastructure
• Every member of the Software Engineering team should be able to demonstrate the following technical, functional, leadership, and business skills:
• Agile Practices
• Porting/Software Configuration
• Programming Languages and Framework Development
• Business Analysis
• Analytical Thinking
• Business Product Knowledge
• Google Cloud Security & Infrastructure - Strong experience with GCP services including IAM, VPC, Cloud Logging, Security Controls, Compute, and Storage, with a solid understanding of cloud-native architecture and security.
• Policy as Code (PaC) & Terraform - Hands-on expertise in implementing Policy-as-Code using Sentinel and Infrastructure-as-Code using Terraform, including cloud security guardrails and automated policy enforcement.
• Cloud Security Engineering & CNAPP - Experience defining security controls, standards, and governance frameworks, along with expertise in Network Security, Identity, Data Security, Logging/Monitoring, and CNAPP-driven secure-by-default cloud deployments.
• Years of Experience:   6-8 Years

 
Why Should You Apply?

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities