Designs, operates, and secures production GCP environments for federal and regulated customers handling CUI. Responsibilities include cloud foundations, networking, IAM, encryption, monitoring, threat detection, incident response, GKE security, infrastructure automation, observability, and compliance evidence. The role translates NIST, FedRAMP, and CMMC requirements into GCP controls and supports audit readiness while reducing operational toil through Terraform and scripting. It requires strong stakeholder communication and hands-on SRE, cloud security, and GCP expertise.
Job Title: Site Reliability Engineer (Google Cloud Platform)
Pay Type: SALARIED EXEMPT
Location: Remote
US Citizenship: Required
Summary of Position Role/Responsibilities
The Site Reliability Engineer (Google Cloud Platform) is a hands-on engineering role focused on designing, operating, and securing GCP environments that protect Controlled Unclassified Information (CUI) for federal and regulated customers. This position applies to an SRE approach to build secure landing zones, network and identity controls, encryption, logging, and detection capabilities while using automation-first practices to ensure environments remain reliable, secure, and repeatable. The role owns provisioning, configuration, observability, and incident response for production GCP environments and reduces operational toil by codifying infrastructure rather than relying on manual console work. Success requires deep practical GCP expertise, working knowledge of NIST SP 800-53, NIST SP 800-171, FedRAMP, and CMMC, and the ability to map security requirements to GCP configurations and audit-ready evidence. This position supports federal CUI environments and requires an active U.S. government Secret security clearance.
Essential Functions of the Job
- Design, build, and operate secure GCP cloud foundations and landing zones for federal and regulated environments, including organization hierarchy, policy guardrails, Assured Workloads, and Cloud Foundation Toolkit-based deployment patterns.
- Engineer and maintain secure GCP network architectures, including Shared VPC, hub-and-spoke topology, VPC Service Controls, Access Context Manager, Private Google Access, Private Service Connect, Cloud NGFW, Cloud Armor, load balancing, DNS, NAT, VPN, and Interconnect under least-exposure principles.
- Implement and administer identity, access, privileged access, and encryption controls, including least-privilege IAM, custom roles, IAM Conditions, deny policies, service-account hygiene, Workload Identity Federation, Privileged Access Manager, Access Approval, Access Transparency, BeyondCorp Enterprise, IAP, Cloud KMS, Cloud HSM, CMEK, and Cloud EKM.
- Develop and operate security monitoring, threat detection, and response capabilities using Chronicle/Google Security Operations, Security Command Center, curated detections, YARA-L, threat intelligence, SOAR playbooks, telemetry pipelines, and integration with MDR/SOC workflows.
- Build and maintain logging, audit, observability, and reliability capabilities using Cloud Audit Logs, aggregated log sinks, retention policies, BigQuery/Chronicle exports, Cloud Monitoring, Cloud Logging, dashboards, uptime checks, SLIs/SLOs, alerting, on-call operations, incident response, and blameless postmortems.
- Secure and operate cloud workloads and platforms, including Sensitive Data Protection/Cloud DLP for CUI discovery and de-identification, hardened GKE environments, Workload Identity, Shielded/Confidential nodes, network policy, GKE Policy Controller, Binary Authorization, and secure Artifact Registry image promotion.
- Automate infrastructure, security, compliance, and reliability operations using Terraform, Infrastructure Manager, Cloud Foundation Toolkit, policy-as-code, secure CI/CD pipelines, Cloud Build, Cloud Deploy, and scripting in Python, Go, or Bash to reduce manual work and operational toil.
- Translate federal security and compliance requirements into GCP configurations and audit-ready evidence, including NIST SP 800-53, NIST SP 800-171, FedRAMP, CMMC, control inheritance, customer responsibility matrices, RMF/FedRAMP authorization support, and assessor/AO documentation.
- Partner directly with customers and internal stakeholders to communicate technical requirements, operational risks, compliance expectations, and implementation status to both technical and non-technical audiences.
Marginal Functions of the Job
- Other duties as assigned
Normal Work Schedule
This is a full-time position. Standard business hours are Monday through Friday 8:30 AM to 5:30 PM. Additional time outside of these hours may be needed to complete the essential functions of the job.
Education, Training, and Experience
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Computer Engineering, or a related field.
- 5+ years of hands-on cloud engineering, site reliability engineering (SRE), or cloud security experience, including 3+ years building and operating production Google Cloud Platform (GCP) environments.
- Demonstrated experience designing and operating GCP landing zones / cloud foundations, network segmentation, and VPC Service Controls.
- Hands-on experience with Chronicle (Google Security Operations) and Security Command Center.
- Strong knowledge of GCP IAM, encryption / CMEK (Cloud KMS), and Assured Workloads for regulated environments.
- Experience operating production systems with an SRE mindset — observability (Cloud Monitoring / Cloud Logging), SLOs, on-call, and incident response.
- Working knowledge of at least one federal control framework (NIST SP 800-53, NIST SP 800-171, FedRAMP, or CMMC).
- Proficiency building infrastructure as code with Terraform (Infrastructure Manager / Cloud Foundation Toolkit) and at least one scripting language (Python, Go, or Bash).
- Proven ability to produce audit-ready documentation and translate technical configurations into compliance evidence.
- Strong written and verbal communication skills with the ability to clearly convey complex information.
- Demonstrated ability to manage multiple projects and deadlines with strong organizational skills.
- Must be a U.S. Citizen
- Hold an active U.S. government Secret (or higher) security clearance. (Preferred)
Preferred Certifications
- Google Professional Cloud Security Engineer
- Google Professional Cloud DevOps Engineer or Professional Cloud Network Engineer
- Google Professional Cloud Architect
- CISSP, CCSP, or similar cybersecurity certification
- FedRAMP, RMF, or CMMC-related training or certifications are a plus
EEO Statement
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.
Similar Jobs
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handle inbound calls and warm leads, consult customers on insurance needs, recommend appropriate coverages, and convert prospects into policyholders. Representatives receive paid training and licensing support, work remotely, and follow a schedule including one weekend day. The role requires strong communication, persuasion, organization, PC proficiency, and a Property & Casualty license after hire.
Top Skills:
PcWired High-Speed Internet
Automotive • Professional Services • Software • Consulting • Energy • Chemical • Renewable Energy
Leads GMP and quality system audits across manufacturing sites, farms, and processing facilities. Assesses compliance with pharmaceutical, supplement, medical device, cosmetics, food safety, and client standards; prepares detailed reports; mentors auditors; leads complex audits; and manages audit schedules and expenses. Requires frequent international and regional travel, strong analytical and communication skills, relevant credentials, and at least four years of related experience.
Top Skills:
21 Cfr 11121 Cfr 210/21121 Cfr 820CpgpCqaGfsiGmpIrcaIso 22716ExcelMicrosoft WordPcqiRabqsaRac
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Performs third-shift maintenance, repair, and construction work for plant and office facilities. Troubleshoots 480V three-phase electrical systems, plumbing, HVAC, and facility equipment; responds to trouble calls; performs drywall, painting, flooring, ceiling, lighting, custodial, and related repairs. Inspects plant-support equipment, records operating readings, interprets blueprints and schematics, uses hand and power tools, and may mentor or train peers.
Top Skills:
480V Three-Phase Electrical SystemsAir CompressorsBoilersExcelHvacMS OfficeMroPlumbingPowerPointScrubbersVacuum PumpsWaste Treatment EquipmentWord
What you need to know about the Austin Tech Scene
Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.
Key Facts About Austin Tech
- Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
- Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
- Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
- Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center
