[Remote] Cloud Engineer
Note: The job is a remote job and is open to candidates in USA. Insight Global is seeking an experienced GCP Cloud Engineer to support a Security Green Team focused on automated cloud remediation. The role will own the Google Cloud configuration remediation pipeline by codifying fixes with Terraform, automating patch and image lifecycle management, hardening cloud baselines to CIS benchmarks, and enforcing security policies and guardrails.
Responsibilities
- Assess the current GCP and broader cloud environment to identify hardening and configuration gaps
- Validate that guardrails are in place and meet CIS benchmarks
- Design and implement policy enforcement and guardrails across GCP via policy-as-code and continuous compliance scanning
- Codify fixes and standards as Infrastructure as Code (Terraform) so misconfigurations do not reappear downstream
- Build and harden CI/CD pipelines with development teams, integrating security and policy gates
- Prepare the environment for forthcoming container and Kubernetes workloads as the Kubernetes platform team engages
- Coordinate server patching and lifecycle management with the platform and Linux teams
- Maintain dashboards and reporting on security posture, remediation velocity, and cloud risk
Skills
- 5-10 years of hands-on cloud engineering, with deep expertise in Google Cloud Platform (GCP)
- Proven experience hardening cloud environments to CIS Benchmarks for GCP
- Track record establishing policies and guardrails across a hyperscaler (org policies, policy-as-code, continuous compliance)
- Strong CI/CD command, building and hardening pipelines in partnership with development teams
- Advanced automation and Infrastructure as Code, primarily Terraform
- GCP OS patch management, coordinating server patching with the platform team
- GCP identity and security services: IAM, VPC/firewall, KMS/Secret Manager, logging and monitoring
- Proficiency in Python and Bash for automation and reporting
- Ansible for configuration management and patch orchestration
- Hyperscaler certifications (AWS, Google Cloud, and/or Azure)
- HashiCorp Terraform Associate or equivalent IaC certification
- CSPM and vulnerability tooling (Security Command Center, Security Hub, Wiz, Prisma Cloud, Tenable, or Qualys)
- Container and image scanning (Trivy, Aqua, Artifact Registry / ECR) and Kubernetes hardening
- Knowledge of the security “color wheel” model and Green / Purple Team frameworks
Company Overview
Company H1B Sponsorship