Senior GCP Cloud Infrastructure Engineer

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Design, construct, and secure a Google Cloud Platform landing zone that complies with FedRAMP High standards for a multi-department enterprise migration.

• Integrate disparate legacy systems into a cohesive environment managed through Infrastructure-as-Code.

• Collaborate closely with the client’s technical lead and customer stakeholders from the initial definition phase to the final delivery.

• Provide a fully documented GCP landing zone aligned with FedRAMP High, encompassing organization, resource hierarchy, and policy structure.

• Create repeatable, automated IaC pipelines across Sandbox, Dev, UAT, and Prod environments.

• Ensure a comprehensive end-to-end network security posture, including border protection and service perimeter controls, prior to production go-live.

• Establish a centralized API Gateway layer that securely manages over 40 external integrations.

• Offer audit-ready logging and monitoring integration that meets client SIEM/SecOps ingestion requirements.

⛳️ Requirements

• Google Cloud Professional Cloud Architect (PCA) certification.

• Relevant federal compliance certification or substantial experience (FedRAMP, NIST 800-53, CJIS, or IL4 environments).

• Over 8 years of experience in designing and deploying production-grade Google Cloud Platform architectures at an enterprise level.

• Proven track record in creating GCP landing zones, including folder/project hierarchy, organizational policies, and labeling standards.

• Extensive hands-on experience in implementing least-privilege IAM models linked with an external Identity Provider for Single Sign-On (SSO).

• Experience in provisioning Assured Workloads folders to adhere to regulated compliance boundaries (FedRAMP, CJIS, HIPAA, or IL4).

• Strong expertise in Infrastructure-as-Code utilizing Git-based repositories and automated CI/CD deployment pipelines.

• Demonstrated proficiency in configuring VPCs, VPNs, Interconnects, firewall rules, Cloud Armor, and VPC Service Controls.

• Experience with the Cloud Operations Suite, including log sink configuration for exporting to external SIEM/SecOps platforms.

• Practical experience in implementing API Gateway or Apigee, including OAuth/JWT validation, rate limiting, and WAF policies.

• Google Cloud Professional Cloud Security Engineer certification.

• Google Cloud Professional Cloud Network Engineer certification.

• Experience in migrating large-scale legacy data volumes (multi-terabyte) into cloud storage with verified integrity checks.

• Previous involvement in supporting state or federal government IT modernization initiatives.

• Familiarity with managing multi-environment pipelines (Sandbox, Dev, UAT, Prod) for regulated workloads.

• Experience in integrating third-party financial, identity, or federal database APIs and SFTP connections.

• Background in coordinating security incident responses alongside a centralized SOC/SIEM team.

🏝️ Benefits

• Competitive salary and benefits package.

• Opportunities for professional growth and development.

• Work in a dynamic and collaborative environment.

• Access to cutting-edge technologies and tools.