Cloud Security Engineer - GCP / Policy as Code

Overview

CTG is seeking to fill a Cloud Security Engineer – GCP / Policy as Code position for our client.

Location: Phoenix, AZ

Duration: Ongoing Contract

Duties:

• Design, develop, and implement security controls and policy-as-code frameworks for Google Cloud infrastructure.
• Define and develop policy-as-code frameworks using tools such as Sentinel and cloud-native policies for Infrastructure-as-Code deployment pipelines, including Terraform.
• Evaluate cloud-native offerings and document security controls, standards, processes, and procedures.
• Conduct feasibility studies to determine how security controls can be converted into policy-as-code requirements.
• Improve policy-as-code and cloud security guardrails by working closely with CNAPP teams to enforce secure-by-default configurations.
• Support security controls across cloud-native infrastructure, including Compute, Storage, Data, Telephony, and emerging Agentic AI capabilities.
• Troubleshoot cloud architecture and infrastructure issues, reproduce reported issues, determine root causes, and implement appropriate security policies.
• Design and support highly available cloud architectures while maintaining strong security, visibility, and compliance.
• Implement and support network isolation, data security, identity, logging, and monitoring capabilities using tools such as Google Cloud Logging, metrics, XQL, and related technologies.
• Act as a consultant and subject matter expert for engineering, sales, and customer organizations to resolve technical deployment obstacles and improve Google Cloud Infrastructure.
• Interpret technical and business objectives and challenges and develop effective security solutions.
• Quickly learn and apply new cloud and security technologies to optimize their potential.
• Apply Agile practices, software configuration, programming, framework development, business analysis, analytical thinking, and business product knowledge in daily engineering activities.

Skills:

• Google Cloud Platform (GCP) infrastructure and security
• Google Cloud IAM, VPC, Cloud Logging, security controls, Storage, and Compute
• Policy as Code (PaC), including HashiCorp Sentinel and cloud-native policy frameworks
• Infrastructure as Code (IaC), particularly Terraform
• Cloud security guardrails and secure-by-default configurations
• Cloud-native security and CNAPP concepts
• Network isolation, data security, identity, logging, and monitoring
• Cloud architecture and high-availability design
• Cloud Logging, metrics, XQL, and related monitoring technologies
• Object-oriented programming with Java, Go, and/or Python
• Agile practices and software configuration
• Programming languages and framework development
• Business analysis and analytical thinking
• Strong communication, consulting, and problem-solving skills
• Ability to quickly learn and adopt new technologies
• FinOps/cloud financial management knowledge preferred

Experience:

• 1-5 years of experience with Google Cloud infrastructure foundational capabilities, including IAM, VPC, Cloud Logging, security controls, Storage, and Compute.
• 1-5 years of experience with Policy as Code, including Sentinel, and Infrastructure Automation tools such as Terraform.
• Experience implementing security controls across cloud-native infrastructure.
• Experience defining and developing policy-as-code frameworks for Infrastructure-as-Code deployment pipelines.
• Experience evaluating cloud-native services and translating security requirements into technical controls, standards, and policies.
• Experience with cloud architecture, network isolation, identity, data security, logging, and monitoring.
• Software development experience using Java, Go, and/or Python.
• Experience troubleshooting complex cloud infrastructure and security issues and determining root causes.
• Experience working with engineering, sales, and customer-facing teams to resolve technical challenges and deployment obstacles.
• FinOps/cloud domain knowledge is preferred.

Education:

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or another technical discipline, or equivalent work experience.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

To Apply:

To be considered, please apply directly to this requisition using the link provided. Kindly forward this to any other interested parties. Thank you!