Cloud Engineer III

Credit One Bank; Las Vegas (NV); On-site; USD 140,000 - 190,000; Full time

Job summary

Credit One Bank is seeking a Platform Engineer III to lead the design, engineering, and security of enterprise-scale Google Cloud platforms, enabling and protecting AI-enabled workloads. You will land AI systems into secure, governable GCP foundations and enforce compliant patterns across the organization.

The role focuses on production-ready AI workloads, auditable security, and scalable infrastructure, using Terraform and CI/CD to drive policy-driven access and secure deployment models.

Qualifications

• 8+ years of cloud engineering, platform engineering, or cloud architecture experience.
• Strong expertise in Google Cloud Platform (GCP) including networking and landing zones.
• Hands-on Terraform and CI/CD implementation experience.
• Experience securing APIs, external endpoints, and AI-enabled workloads.

Responsibilities

• Design and evolve enterprise GCP platforms and landing zones.
• Define standards for scalable, secure cloud infrastructure.
• Own multi-project and multi-cloud architecture, governance models.
• Architect security controls for AI platforms (Vertex AI, Gemini) and data protection.
• Lead architecture for Shared VPC, private service access, and hybrid connectivity.
• Build Terraform-based infrastructure and drive CI/CD pipelines and GitOps.
• Implement enterprise security frameworks (IAM, KMS, DLP) and integrate with Wiz/SIEM.
• Mentor engineers on GCP architecture, security, and automation.

Skills

GCP architecture

Terraform

CI/CD

Cloud security

Leadership

Networking

Education

GCP certifications (e.g., Professional Cloud Architect)

Tools

Terraform

GitLab

Wiz

SIEM

DLP

Job description

Position Summary

We are seeking a Platform Engineer III to lead the design, engineering, and security of enterprise-scale Google Cloud platforms, with a focus on enabling and protecting AI-enabled workloads. This role is responsible for building the underlying GCP foundation that AI systems depend on—including landing zones, networking, identity, data protection, and controlled access to services such as Vertex AI and Gemini. You will define how these services are securely consumed across the organization, ensuring strong governance, isolation, and compliance. You will help architect and enforce secure connectivity patterns, private access to AI services, API and endpoint protection, data security controls, and policy-driven access models. These standards will be embedded into Terraform-based infrastructure and CI/CD pipelines to ensure consistency and scalability.

The focus of this role is to make AI workloads production-ready, auditable, and secure at scale.

Summary Of Essential Job Functions

Cloud Platform Architecture

• Design and evolve enterprise GCP platforms and landing zones
• Define standards for scalable, resilient, and secure cloud infrastructure
• Own multi-project and multi-cloud architecture, organization hierarchy, and governance models

Secure AI & Cloud Workloads

• Architect security controls protecting AI platforms and services (Gemini, Vertex AI)
• Implement safeguards for:
• Sensitive data exposure (PII, PCI)
• API and model endpoint security
• Identity and access boundaries
• Establish secure patterns for AI consumption (not model development)
• Partner with security teams on AI risk management and compliance

Networking & Connectivity

• Lead architecture for:
• Shared VPC and private service access
• Private Service Connect and service isolation
• Hybrid connectivity (VPN, Interconnect)
• Harden ingress/egress paths for AI and application endpoints
• Enforce network segmentation and zero-trust principles

Infrastructure Automation & CI/CD

• Build and standardize Terraform-based infrastructure
• Drive CI/CD pipelines for infrastructure and platform services
• Implement GitOps workflows and automated policy enforcement
• Enable secure deployment of AI-integrated applications

Governance & Security Engineering

• Implement enterprise security frameworks using:
• IAM, VPC Service Controls, KMS, DLP
• Policy enforcement and compliance automation
• Integrate with tools such as Wiz, SIEM, and vulnerability management platforms
• Define best practices for secure external endpoints and API exposure

Leadership & Influence

• Serve as a technical leader and advisor across Cloud, Security, and Engineering teams
• Drive adoption of secure cloud and AI practices
• Mentor engineers on GCP architecture, security, and automation

Position Requirements

• 8+ years of experience in cloud engineering, platform engineering, or cloud architecture
• Expertise in Google Cloud Platform (GCP)
• Strong experience with:
• GCP networking (VPCs, Private Service Connect, hybrid connectivity)
• Landing zone design and governance
• Cloud security architecture and compliance frameworks
• Hands-on expertise in:
• Terraform (Infrastructure as Code)
• CI/CD pipelines (GitLab or similar)
• Experience securing:
• APIs, external endpoints, and distributed systemsCloud-native and AI-integrated workloads

Preferred

• Exposure to Vertex AI, Gemini, or AI-enabled platforms (from a platform/security perspective)
• Experience with AI security, model protection, and data governance frameworks
• Familiarity with tools such as Wiz, DLP, SIEM, CSPM
• Multi-cloud experience (AWS preferred)
• GCP certifications (Professional Cloud Architect, Security Engineer)

Credit One Bank, N.A. is a data-driven financial services company based in Las Vegas. Founded in 1984, Credit One Bank offers a spectrum of credit card products for people in all stages of financial life. Credit One Bank is an equal opportunity employer committed to diversity and inclusion and does not discriminate against any employee or applicant for employment because of age, race, religion, color, disability, sex, sexual orientation, or national origin. Reasonable accommodations can be made for those who require them, including access to job applications and workplace accommodations. Employment at Credit One Bank is based on mutual consent (also known as at-will). This means that employees and the Bank may terminate the employment relationship at any time, with or without cause and with or without notice.