We are seeking a Senior GCP Compliance / DevSecOps Engineer to support a Google Cloud compliance automation initiative focused on Kubernetes and cloud security posture management. This role will focus heavily on developing automated compliance checks using Common Expression Language (CEL) within Google Cloud Security Command Center (SCC) and Compliance Manager. Experience with GCP, GKE (Google Kubernetes Engine), Policy-as-Code, and translating CIS Benchmark and NIST security controls into automated validation logic is desired.
- 7+ years of cloud/infrastructure engineering experience
- 3+ years of hands-on GCP experience
- Strong experience with:
- Securing GKE / Kubernetes environments
- GCP IAM
- SCC (Security Command Center)
- Terraform
- CI/CD pipeline
Needed Experience
- Common Expression Language (CEL)
- Policy-as-Code / Compliance-as-Code
- CIS Benchmarks, NIST 800-53, or regulated cloud environments
- Strong scripting and automation background
- Ability to translate compliance requirements into technical validation checks
Nice to have Experience
- Experience with Google Cloud Compliance Manager
- Experience supporting regulated or government cloud environments
- Familiarity with Gemini Enterprise, Vertex AI, or Google AI products
- Google Cloud certifications preferred
Job responsibilities
- Develop automated compliance checks using CEL within SCC and Compliance Manager
- Translate CIS Benchmarks and NIST 800-53 controls into enforceable cloud validation logic
- Evaluate and secure GKE / Kubernetes environments, including workload permissions, RBAC, and policy compliance
- Identify compliance gaps and implement automated policy checks
- Support Terraform, CI/CD, and cloud security automation initiatives
- Build and validate checks across:
- - GKE (Google Kubernetes Engine)
- - IAM
- - Logging
- - Networking
- - Kubernetes workloads and cluster configurations