Principal Cloud Security Engineer

Responsibilities

Kforce has a client in Englewood, CO that is seeking a Principal Cloud Security Engineer. Summary: We're looking for a Principal Cloud Security Engineer who brings deep experience, sharp instincts, and hands-on skills to help a large-scale enterprise mature its GCP presence. If you've transitioned from on-prem to cloud, know your way around GCP like the back of your hand, and are ready to lead security practices at scale, this role could be the next big step in your journey. This isn't a build-from-scratch infrastructure role-it's about navigating complex systems, guiding cloud security practices, and driving compliance and resilience across thousands of machines in a mature enterprise environment. Duties:

• Own cloud security strategy and execution for GCP, focusing on compliance, vulnerability management, and scalable controls
• Apply your past on-prem experience to secure a hybrid environment while leaning fully into GCP for the future
• Handle vulnerability assessments and patching processes across tens of thousands of machines, prioritizing and executing within tight timelines
• Contribute hands-on with tools like Terraform and Ansible, with working knowledge of Python (not a developer role, but familiarity is key)
• Guide decisions around PCI, SOC compliance, and business continuity planning (BCPs)
• Present to senior leadership, explain security tradeoffs, and justify technical decisions with clarity and confidence
• Mentor peers and junior team members, representing the principal level with strategic insight and technical depth
• Participate in GCP migration projects-ideally having been involved in past cloud transition initiatives
  
  

Requirements

• 10 years of experience in IT
• 8 years of experience in security or infrastructure roles
• 2-4 years of recent, hands-on experience with GCP (not just AWS)
• Experience moving from on-prem environments to cloud-native models
• Strong grasp of DevOps principles-comfortable automating with Terraform and Ansible
• Working knowledge of Python for scripting and automation purposes
• A strategic thinker with excellent communication skills-comfortable leading meetings, mentoring others, and making big-picture decisions
• Experience in regulatory environments (PCI, SOC) with a strong understanding of compliance frameworks
• Bonus: Prior involvement in cloud migration efforts-especially understanding when and how you engaged in the process
  
  

Why this role matters: Our client has built a strong model in AWS and is now extending that to GCP. The challenge? A gap in GCP expertise. They're actively seeking talent with real GCP experience to lead the charge in cloud security and compliance-particularly someone who understands both the technical and strategic layers. What This Role Is Not: This isn't a Kubernetes-heavy or app-development position. You won't be building a public cloud architecture from scratch-but you will influence how security scales within it.

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.