Lead Software Engineer - Cloud

Responsibilities

• Design, develop, troubleshoot, and deliver creative software solutions across multiple technical areas.
• Lead the architecture and hands-on delivery of GCP landing zones, organization/folder/project hierarchies, networking, and shared services.
• Build reusable Terraform modules, reference architectures, and CI/CD enablement to accelerate secure onboarding.
• Own GCP IAM and security guardrails, including role engineering, service accounts, IAM Conditions, organization policies, and deny policies.
• Implement OIDC/SAML and Workforce and Workload Identity Federation while automating IAM governance, auditing, and evidence collection.
• Lead the effective and responsible use of approved AI-assisted software development tools for code review, refactoring, testing, troubleshooting, and incident analysis.
• Evaluate architectural designs and technical credentials with vendors, startups, and internal teams.
• Influence technical decisions and deliver secure, compliant solutions across cross-functional teams.

Requirements

• Formal training or certification in software engineering concepts and at least 5 years of applied experience.
• Strong experience with GCP IAM and identity, including role and permission modeling, service accounts, federation patterns, and access governance.
• Hands-on expertise with Cloud Run, Cloud Functions, Pub/Sub, and GKE.
• Proficiency with Terraform and Python or Go for automation, tooling, and CI/CD integration.
• Experience implementing IAM Conditions, deny policies, policy-as-code, centralized logging and auditing, and key management patterns at scale.
• Ability to deliver secure, compliant solutions and influence cross-functional technical decisions.
• Experience leading approved AI-assisted software development practices and validating AI outputs for correctness, performance, and security.
• Understanding of responsible AI use in engineering workflows, including data sensitivity, secure input and output handling, resiliency, and security expectations.
• Preferred experience with AWS or Azure and multi-cloud operating models.
• Preferred production-grade Docker, Kubernetes, and GKE operations experience.
• Understanding of OAuth2, OIDC, SAML, secure service-to-service identity patterns, and LLM or AI/ML frameworks for AIOps.
• Relevant certifications such as Google Professional Cloud Architect or Professional Cloud Security Engineer are preferred.

Benefits

• Competitive total rewards package with base salary, potentially including commission-based pay or discretionary incentive compensation in eligible roles; specific compensation details are provided during hiring.
• Comprehensive healthcare coverage, on-site health and wellness centers, retirement savings plan, backup childcare, tuition reimbursement, mental health support, and financial coaching.
• Equal opportunity employer with reasonable accommodations for religious practices, mental health needs, and physical disabilities.
• Enhanced pre-hire screening, including criminal and credit background checks where permitted by law, is required for this high-risk technology role.