GCP Cloud Engineer

GCP Cloud Engineer

Insight Global is seeking an experienced GCP Cloud Engineer to serve as a core member of a Security Green Team – the function responsible for translating vulnerability and misconfiguration findings into durable, automated remediation that is embedded into how cloud infrastructure is built and maintained. Moving beyond a reactive, manual approach to patching, this individual will own the configuration remediation pipeline for the Google Cloud estate: codifying fixes as infrastructure as code, automating patch and image lifecycle management, hardening cloud baselines against CIS benchmarks, and enforcing policies and guardrails through policy-as-code. This is a hands-on engineering position in which architects establish strategic direction and the engineer executes against it. As the organization's Google Cloud footprint continues to mature, the successful candidate should anticipate a significant volume of foundational hardening work.

Key Responsibilities:

• Assess the current GCP and broader cloud environment to identify hardening and configuration gaps.
• Validate that guardrails are in place and meet CIS benchmarks.
• Design and implement policy enforcement and guardrails across GCP via policy-as-code and continuous compliance scanning.
• Codify fixes and standards as Infrastructure as Code (Terraform) so misconfigurations do not reappear downstream.
• Build and harden CI/CD pipelines with development teams, integrating security and policy gates.
• Prepare the environment for forthcoming container and Kubernetes workloads as the Kubernetes platform team engages.
• Coordinate server patching and lifecycle management with the platform and Linux teams.
• Maintain dashboards and reporting on security posture, remediation velocity, and cloud risk.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on click.appcast.io.

Skills and Requirements:

• 5-10 years of hands-on cloud engineering, with deep expertise in Google Cloud Platform (GCP).
• Proven experience hardening cloud environments to CIS Benchmarks for GCP.
• Track record establishing policies and guardrails across a hyperscaler (org policies, policy-as-code, continuous compliance).
• Strong CI/CD command, building and hardening pipelines in partnership with development teams.
• Advanced automation and Infrastructure as Code, primarily Terraform.
• GCP OS patch management, coordinating server patching with the platform team.
• GCP identity and security services: IAM, VPC/firewall, KMS/Secret Manager, logging and monitoring.
• Proficiency in Python and Bash for automation and reporting. - Ansible for configuration management and patch orchestration
• Hyperscaler certifications (AWS, Google Cloud, and/or Azure).
• HashiCorp Terraform Associate or equivalent IaC certification.
• CSPM and vulnerability tooling (Security Command Center, Security Hub, Wiz, Prisma Cloud, Tenable, or Qualys).
• Container and image scanning (Trivy, Aqua, Artifact Registry / ECR) and Kubernetes hardening.
• Knowledge of the security "color wheel" model and Green / Purple Team frameworks.