Senior Google Cloud Engineer

• Design and implement secure, scalable, and highly available solutions on Google Cloud that meet security and compliance requirements including FedRAMP, NIST 800-53, CMMC, CIS Benchmarks, and Zero Trust principles.
• Lead technical discovery sessions and develop solution architectures aligned with customer requirements.
• Design secure networking architectures using VPCs, Shared VPC, firewall policies, Cloud DNS, load balancing, Cloud NAT, private connectivity, and hybrid networking.
• Deploy and operate services such as Compute Engine, Google Kubernetes Engine (GKE), Cloud Storage, Cloud SQL, Secret Manager, Cloud KMS, Cloud Logging, Cloud Monitoring, and related GCP services.
• Implement cloud security controls including least-privilege IAM, network segmentation, encryption and key management, centralized logging, monitoring, vulnerability management, and secure configuration.
• Build and support containerized platforms using Kubernetes and GKE.
• Develop Infrastructure as Code (IaC) using Terraform or similar automation frameworks.
• Design and implement CI/CD pipelines supporting infrastructure and application deployments.
• Automate infrastructure provisioning, configuration management, and operational tasks.
• Develop technical documentation, architecture diagrams, and implementation guides.
• Troubleshoot complex infrastructure, networking, security, and application issues.
• Support security assessment, Authorization to Operate (ATO), continuous monitoring, and POA&M remediation activities, including collection and maintenance of technical evidence.
• Provide technical leadership and mentor junior engineers.
• Collaborate with customers, project managers, and engineering teams throughout project lifecycles.

The ideal candidate combines deep hands-on GCP engineering expertise with experience implementing cloud environments subject to federal cybersecurity and compliance requirements such as FedRAMP, FISMA, DoD Risk Management Framework (RMF), NIST SP 800-53, or comparable regulated security frameworks.

This role requires strong knowledge of cloud security, Kubernetes, Infrastructure as Code, automation, DevSecOps, and hybrid infrastructure. Candidates must be capable of translating business requirements into secure, compliant, and production-ready cloud architectures., * Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent experience.

• 7+ years of experience designing and implementing enterprise IT infrastructure.
• 4+ years of hands-on GCP architecture experience.
• Strong knowledge of GCP architecture, including IAM and service accounts, organizations and projects, VPC and Shared VPC, network security, Compute Engine, GKE, Cloud Storage, Cloud Logging and Monitoring, Cloud KMS, and Secret Manager.
• Strong hands-on experience with Terraform or comparable Infrastructure as Code technologies.
• Experience implementing CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, Code Build, Code Pipeline
• Strong Linux administration and troubleshooting skills.
• Experience with scripting and automation using Python, Bash, or similar technologies.
• Hands-on experience supporting systems governed by FedRAMP, FISMA, DoD RMF, NIST SP 800-53, or comparable federal cybersecurity frameworks.
• Extensive experience with Kubernetes, Docker, GKE, Red Hat Openshift, container networking, service mesh technologies, container security best practices
• Understanding of security control implementation, assessment evidence, continuous monitoring, vulnerability management, and remediation processes.
• Strong understanding of cloud security concepts, including IAM, network segmentation, encryption, key management, logging, monitoring, vulnerability management, and secure configuration.
• Ability to produce clear technical documentation and communicate effectively with engineering, security, compliance, and customer stakeholders.

Desired:

• Google Cloud Architect Professional
• Google Cloud Security Engineer
• Certified Kubernetes Administrator (CKA)
• HashiCorp Terraform Associate
• Security certifications such as CISSP, CCSP, or Security+

Clearance:

• US Citizenship required, must be able to obtain Secret clearance