Job Summary

We are seeking a Cloud Policy as Code Engineer to design, develop, and implement security controls and Policy as Code (PaC) frameworks across public cloud infrastructure. The role will focus on Google Cloud foundational capabilities, Terraform-based infrastructure automation, Sentinel and cloud-native policy enforcement, secure-by-default cloud configurations, and cloud governance. The ideal candidate will have strong cloud architecture and security knowledge, experience developing Policy as Code frameworks, and the ability to work with engineering, sales, and customer organizations to resolve technical deployment challenges and improve cloud infrastructure.

Key Responsibilities
• Evaluate cloud-native offerings and document controls, standards, processes, and procedures.
• Perform feasibility studies to define controls that are in scope for Policy as Code enablement.
• Define and develop Policy as Code frameworks using Sentinel and cloud-native policy capabilities for Infrastructure as Code deployment pipelines such as Terraform.
• Improve Policy as Code and cloud guardrails using Sentinel and native cloud policies.
• Work closely with CNAPP teams to enforce secure-by-default configurations across cloud platforms.
• Implement security controls for different types of cloud infrastructure.
• Support Google Cloud infrastructure foundational capabilities, including IAM, VPC, Cloud Logging, security controls, storage, and compute.
• Apply infrastructure automation using Terraform and Policy as Code practices.
• Leverage cloud architecture knowledge to support high availability while maintaining strong security and visibility.
• Implement and support network isolation, data security, identity, logging, and monitoring controls.
• Utilize Cloud Logging, metrics, VQL, and other mechanisms to support monitoring, troubleshooting, and security visibility.
• Analyze public cloud-native offerings related to compute, storage, data, telephony, Agentic AI, and their underlying architectures.
• Troubleshoot and debug complex cloud infrastructure issues and determine root causes for customer-reported problems.
• Act as a consultant and subject matter expert for internal engineering, sales, and customer organizations.
• Resolve technical deployment obstacles and recommend improvements to cloud infrastructure.
• Interpret technical and business objectives and challenges and articulate effective solutions.
• Stay current with emerging technologies and quickly learn and apply new cloud capabilities.
• Support continuous improvement of cloud security controls, governance, automation, and infrastructure practices.

Required Qualifications
• Bachelor's or master's degree in Computer Science, Computer Engineering, another technical discipline, or equivalent work experience.
• 1-5+ years of experience with Google Cloud infrastructure foundational capabilities, including IAM, VPC, Cloud Logging, security controls, storage, and compute.
• 1-5+ years of experience with Policy as Code, including Sentinel.
• 1-5+ years of experience with infrastructure automation tools such as Terraform.
• Experience implementing security controls across cloud infrastructure environments.
• Strong understanding of public cloud architecture and cloud-native offerings.
• Experience evaluating cloud-native offerings and documenting controls, standards, processes, and procedures.
• Experience defining and developing Policy as Code frameworks for Infrastructure as Code deployment pipelines.
• In-depth understanding of cloud-native offerings related to Compute, Storage, Data, Telephony, and Agentic AI.
• Strong understanding of cloud architectures supporting high availability, security, and visibility.
• Experience with network isolation, data security, identity, logging, and monitoring technologies.
• Experience with Cloud Logging, metrics, VQL, and other cloud monitoring and security mechanisms.
• Software development experience in an object-oriented programming language such as Java, Go, or Python.
• Strong troubleshooting, debugging, root-cause analysis, and problem-solving skills.
• Ability to effectively interpret technical and business objectives and challenges and articulate solutions.
• Ability to work effectively with engineering, sales, customer, and other internal stakeholders.
• Willingness and ability to learn new technologies quickly and apply them effectively.

Preferred Qualifications
• FinOps or cloud financial management domain knowledge.
• Experience with CNAPP platforms and cloud security posture management.
• Experience with additional public cloud platforms and their native policy capabilities.
• Experience developing secure-by-default cloud infrastructure guardrails.
• Experience working with large-scale enterprise cloud environments.
• Experience acting as a technical consultant or subject matter expert for cloud infrastructure and security initiatives.