Lead Cloud Engineer

We are seeking a Lead Cloud Engineer to join our team.In this position, you will be responsible for designing and securing cloud infrastructure in large-scale, complex enterprise environments. You will work closely with multidisciplinary teams to deliver secure, compliant, and forward-thinking cloud solutions that align with organizational goals.ResponsibilitiesArchitect and design secure cloud infrastructure tailored to business requirementsDevelop and enforce cloud security policies and services, ensuring alignment with industry standards and compliance needsPerform security threat assessments and implement mitigation strategies to safeguard cloud assetsEstablish and uphold security strategies and governance protocols across cloud platformsPartner with SOC and SecOps teams to maintain regulatory compliance and prepare for auditsOversee Identity and Access Management (IAM), including structuring resource hierarchies, boundary protections, and secure communicationsPlan and deploy network security measures such as firewalls, VPCs, and perimeter defensesApply observability solutions for comprehensive logging, monitoring, and threat detection in cloud environmentsUtilize AI agents to automate and optimize security and infrastructure deployment processesLead security-driven digital transformation initiatives using Infrastructure as Code (IaC) and manage secure containerized workloadsRequirementsMinimum of 5 years of hands-on experience in cloud engineering or a related disciplineAt least one year of experience leading and managing technical teamsDemonstrated expertise in architecting and implementing secure cloud policies and services, preferably on Google Cloud Platform (GCP)Strong background in security threat analysis and mitigation, with practical experience using SIEM tools like Google SecOps (Chronicle), WiZ, or similar platformsProven ability to define, design, and implement comprehensive security strategies and governance frameworksExperience enforcing regulatory controls and working with SOC or SecOps teams to achieve compliance objectivesAdvanced proficiency in Identity and Access Management (IAM), including resource hierarchy planning, boundary protection, secure communications, and Workload Identity Federation (WIF)Skilled in designing and deploying network security solutions such as Cloud Firewall, Cloud Armor, and VPC, as well as ensuring robust data protection and observability for threat managementExperience using AI agents to automate, streamline, and reduce risk in security and infrastructure deploymentsExpertise in establishing secure Landing Zones, Data and AI Foundations, and setting up secure communication perimeters for users, agents, and servicesProficient in Infrastructure as Code (e.g., Terraform) for compliance-focused deployments, managing secure workloads with Google Kubernetes Engine (GKE), and securing CI/CD and DevSecOps pipelinesEnglish language proficiency (written and spoken) at B2+ level or higher #J-18808-Ljbffr