GCP Cloud Engineer
Required Skills & Experience - 5-10 years of hands-on cloud engineering, with deep expertise in Google Cloud Platform (GCP). - Proven experience hardening cloud environments to CIS Benchmarks for GCP. - Track record establishing policies and guardrails across a hyperscaler (org policies, policy-as-code, continuous compliance). - Strong CI/CD command, building and hardening pipelines in partnership with development teams. - Advanced automation and Infrastructure as Code, primarily Terraform. - GCP OS patch management, coordinating server patching with the platform team. - GCP identity and security services: IAM, VPC/firewall, KMS/Secret Manager, logging and monitoring. - Proficiency in Python and Bash for automation and reporting.
Nice to Have
Skills & Experience - Ansible for configuration management and patch orchestration - Hyperscaler certifications (AWS, Google Cloud, and/or Azure). - HashiCorp Terraform Associate or equivalent IaC certification. - CSPM and vulnerability tooling (Security Command Center, Security Hub, Wiz, Prisma Cloud, Tenable, or Qualys). - Container and image scanning (Trivy, Aqua, Artifact Registry / ECR) and Kubernetes hardening. - Knowledge of the security “color wheel” model and Green / Purple Team frameworks.
Job Description
Insight Global is seeking an experienced GCP Cloud Engineer to serve as a core member of a Security Green Team – the function responsible for translating vulnerability and misconfiguration findings into durable, automated remediation that is embedded into how cloud infrastructure is built and maintained. Moving beyond a reactive, manual approach to patching, this individual will own the configuration remediation pipeline for the Google Cloud estate: codifying fixes as infrastructure as code, automating patch and image lifecycle management, hardening cloud baselines against CIS benchmarks, and enforcing policies and guardrails through policy-as-code. This is a hands-on engineering position in which architects establish strategic direction and the engineer executes against it. As the organization’s Google Cloud footprint continues to mature, the successful candidate should anticipate a significant volume of foundational hardening work. Key Responsibilities: - Assess the current GCP and broader cloud environment to identify hardening and configuration gaps. - Validate that guardrails are in place and meet CIS benchmarks. - Design and implement policy enforcement and guardrails across GCP via policy-as-code and continuous compliance scanning. - Codify fixes and standards as Infrastructure as Code (Terraform) so misconfigurations do not reappear downstream. - Build and harden CI/CD pipelines with development teams, integrating security and policy gates. - Prepare the environment for forthcoming container and Kubernetes workloads as the Kubernetes platform team engages. - Coordinate server patching and lifecycle management with the platform and Linux teams. - Maintain dashboards and reporting on security posture, remediation velocity, and cloud risk.