Remote Position
Senior GCP Cloud Infrastructure Engineer
🌍 Remote · United States
💼 Full-time
Job Description:
- Architect, build, and secure a FedRAMP High-compliant Google Cloud Platform landing zone for a multi-department enterprise migration
- Consolidate fragmented legacy systems into a unified, Infrastructure-as-Code-managed environment
- Work closely with the client technical lead and customer stakeholders from initial definition through final delivery
- Deliver a fully documented, FedRAMP High-aligned GCP landing zone spanning organization, resource hierarchy, and policy structure
- Establish repeatable, automated IaC pipelines across Sandbox, Dev, UAT, and Prod environments
- Ensure end-to-end network security posture, including border protection and service perimeter controls, before production go-live
- Stand up a centralized API Gateway layer securely brokering 40+ external integrations
- Provide audit-ready logging and monitoring integration verified against client SIEM/SecOps ingestion requirements
Requirements:
- Google Cloud Professional Cloud Architect (PCA)
- Relevant federal compliance certification or demonstrated experience (FedRAMP, NIST 800-53, CJIS, or IL4 environments)
- 8+ years designing and deploying production-grade Google Cloud Platform architectures at enterprise scale
- Proven experience building GCP landing zones, including folder/project hierarchy, org policies, and labeling standards
- Deep hands-on expertise implementing least-privilege IAM models integrated with an external Identity Provider for SSO
- Experience provisioning Assured Workloads folders to meet regulated compliance boundaries (FedRAMP, CJIS, HIPAA, or IL4)
- Strong background in Infrastructure-as-Code using Git-based repositories and automated CI/CD deployment pipelines
- Demonstrated skill configuring VPCs, VPNs, Interconnects, firewall rules, Cloud Armor, and VPC Service Controls
- Experience with Cloud Operations Suite, including log sink configuration exporting to external SIEM/SecOps platforms
- Hands-on experience implementing API Gateway or Apigee, including OAuth/JWT validation, rate limiting, and WAF policies
- Google Cloud Professional Cloud Security Engineer
- Google Cloud Professional Cloud Network Engineer
- Experience migrating large-scale legacy data volumes (multi-terabyte) into cloud storage with validated integrity checks
- Prior work supporting state or federal government IT modernization projects
- Familiarity with managing multi-environment pipelines (Sandbox, Dev, UAT, Prod) for regulated workloads
- Experience integrating third-party financial, identity, or federal database APIs and SFTP connections
- Background in security incident response coordination alongside a centralized SOC/SIEM team
Benefits: