Our client, a IT Services and Consulting company, is looking for a Cloud Security Engineer – GCP / Terraform / Policy-as-Code for their Phoenix, AZ/ Hybrid location.
Responsibilities:
Evaluating the cloud native offerings and documenting controls, standards, processes, and procedures
Perform feasibility of study to define the convert the controls into scope for policy as a code enablement
Define and developing policy-as-code frameworks (e.g., Sentinel and cloud native) for Infrastructure-as-Code deployment pipeline (e.g., Terraform)
Improve PaC (policy-as-code) and guardrails (Sentinel, native cloud policies) by closely working with CNAPP to enforce secure-by-default configurations across cloud platforms
Requirements:
Bachelor"s or master’s degree in computer science, computer engineering, or other technical discipline, or equivalent work experience
1-5 + years of experience with Google Cloud Infrastructure foundational capabilities IAM, VPC, Cloud Logging, Security controls, Storage and Compute
1-5 + years of experience with Policy as a Code (Sentinel), Infrastructure automation tools (Terraform) and with a focus on implementing security controls for all type of cloud native infrastructure
In-depth understanding of Public Cloud native offerings related to Compute, Storage, Data, Telephony, Agentic AI and underlying architectures for troubleshooting, reproducing, and determining the root cause for customer-reported issues and enabling policies
Understanding of cloud architecture to ensure high availability while ensuring the highest level of security and visibility
Experience with Network Isolation, Data Security, Identity, Logging and Monitoring tools such as Cloud logging, metrics, XQL and other mechanism
FinOps (cloud) domain knowledge preferred
Software development experience in one of the OO programming language: Java, Go and or Python
Ability to effectively interpret technical and business objectives and challenges and articulate solutions
Willingness to learn new technologies quickly and exploit them to their optimal potential
Act as consultant and subject matter expert for internal stakeholders in engineering, sales, customer organizations to resolve technical deployment obstacles and improve Google Cloud Infrastructure
Every member of the Software Engineering team should be able to demonstrate the following technical, functional, leadership, and business skills:
Agile Practices
Porting/Software Configuration
Programming Languages and Framework Development
Business Analysis
Analytical Thinking
Business Product Knowledge
Google Cloud Security & Infrastructure - Strong experience with GCP services including IAM, VPC, Cloud Logging, Security Controls, Compute, and Storage, with a solid understanding of cloud-native architecture and security.
Policy as Code (PaC) & Terraform - Hands-on expertise in implementing Policy-as-Code using Sentinel and Infrastructure-as-Code using Terraform, including cloud security guardrails and automated policy enforcement.
Cloud Security Engineering & CNAPP - Experience defining security controls, standards, and governance frameworks, along with expertise in Network Security, Identity, Data Security, Logging/Monitoring, and CNAPP-driven secure-by-default cloud deployments.