Cloud Infrastructure Security Engineer

Technologent, Inc.; Phoenix (AZ); On-site; USD 140,000 - 180,000; Full time

Job summary

Technologent, Inc. is seeking a Cloud Infrastructure Security Engineer to establish, automate, and continuously improve security controls across Google Cloud environments.

The role focuses on cloud-native security architecture, policy automation, governance, and secure-by-default deployments. The ideal candidate will collaborate with engineering, CNAPP, and customer-facing teams to develop scalable controls, troubleshoot infrastructure challenges, and strengthen security and operational posture

Qualifications

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or equivalent professional experience.
• 5+ years of Google Cloud infrastructure experience with IAM, VPC, Logging, and compute/storage services.
• 5+ years with Infrastructure as Code and Terraform.
• Experience with Policy as Code technologies such as HashiCorp Sentinel.
• Experience designing automated security controls for cloud-native infrastructure.
• Strong understanding of Google Cloud architecture and security concepts.
• Ability to translate security requirements into automated technical controls and policies.

Responsibilities

• Develop and maintain security controls across Google Cloud infrastructure, including identity, networking, compute, storage, logging, and monitoring.
• Assess cloud patterns to establish security requirements, standards, procedures, and governance.
• Translate security requirements into enforceable policies and automated guardrails.
• Build policy as code capabilities using Sentinel and cloud-native mechanisms.
• Integrate security guardrails into Terraform-based deployment pipelines.

Skills

Cloud security

Terraform

Policy as Code

Python

GCP IAM

Security architecture

CI/CD security

GaP?

Threat modeling

CNAPP

Sentinel policies

XQL

Education

Bachelor's or Master's in CS/Engineering

Tools

HashiCorp Sentinel

Job description

The Opportunity: We are looking for a Cloud Infrastructure Security Engineer to help establish, automate, and continuously improve security controls across Google Cloud environments. This position focuses on cloud-native security architecture, policy automation, infrastructure governance, and secure‑by‑default deployments.

The ideal candidate will work closely with engineering, cloud security, CNAPP, sales, and customer‑facing teams to develop scalable controls, troubleshoot complex infrastructure challenges, and strengthen the overall security and operational posture of Google Cloud environments.

• Role: Cloud Infrastructure Security Engineer
• Experience: 7+ years
• Work Location: Phoenix, AZ (100% onsite). Candidates must currently reside within commuting distance. Relocation is not available.
• Project Duration:12+ Months Contract

Key Responsibilities

• Develop and maintain security controls across Google Cloud infrastructure, covering identity, networking, compute, storage, logging, monitoring, and other foundational cloud capabilities.
• Assess Google Cloud services and infrastructure patterns to establish appropriate security requirements, technical standards, operational procedures, and governance practices.
• Analyze existing security requirements and determine their suitability for automated enforcement through Policy as Code.
• Build and enhance Policy as Code capabilities using HashiCorp Sentinel and native cloud policy mechanisms.
• Integrate automated security policies and guardrails into Infrastructure as Code delivery workflows, particularly Terraform-based deployment pipelines.
• Partner with cloud security and CNAPP teams to strengthen preventive controls and establish secure‑by‑default configurations across cloud environments.
• Develop reusable policy frameworks that improve consistency, security, and governance throughout the infrastructure deployment lifecycle.
• Evaluate cloud-native services spanning compute, storage, data, communications, and emerging agentic AI workloads to understand their architectural and security implications.
• Investigate complex cloud infrastructure issues by reproducing customer‑reported scenarios, analyzing underlying architectures, identifying root causes, and developing appropriate remediation or policy solutions.
• Review cloud architectures to support resilient, highly available environments while maintaining strong security controls and comprehensive operational visibility.
• Implement and evaluate controls related to network isolation, data protection, identity management, centralized logging, metrics, monitoring, and security analytics.
• Work with engineering teams to identify technical deployment challenges and provide practical solutions that align security requirements with business and operational needs.
• Serve as a technical advisor to internal engineering, sales, and customer organizations on Google Cloud infrastructure security and deployment requirements.
• Contribute to continuous improvement of cloud governance, automation, and security engineering practices.
• Stay current with emerging cloud technologies and rapidly adopt relevant capabilities to improve security, automation, and operational efficiency.

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or another technical discipline, or equivalent professional experience.
• 5 years of experience working with Google Cloud infrastructure and core capabilities such as IAM, VPC, Cloud Logging, security controls, storage, and compute services.
• 5 years of practical experience with Infrastructure as Code and automation technologies, particularly Terraform.
• Experience working with Policy as Code technologies such as HashiCorp Sentinel or comparable cloud‑native policy frameworks.
• Experience designing and implementing automated security controls for cloud‑native infrastructure.
• Strong understanding of Google Cloud architecture and its core services, including compute, storage, networking, data, and identity capabilities.
• Knowledge of cloud security concepts involving network isolation, data protection, identity and access management, logging, monitoring, and security visibility.
• Ability to assess cloud services and translate security requirements into enforceable technical controls and automated policies.
• Experience working with cloud infrastructure deployment pipelines and integrating security guardrails into Infrastructure as Code workflows.
• Programming or software development experience in at least one object‑oriented or general‑purpose language such as Java, Go, or Python.
• Ability to troubleshoot cloud infrastructure issues, reproduce technical scenarios, investigate underlying causes, and develop effective solutions.
• Strong understanding of high‑availability cloud architectures and the relationship between resilience, security, and observability.
• Ability to understand technical requirements and business objectives and translate them into practical engineering solutions.
• Strong analytical, problem‑solving, communication, and collaboration skills.

Preferred Qualifications

• Experience working with CNAPP platforms and cloud security posture management capabilities.
• Experience developing advanced Sentinel policies or native cloud policy controls at scale.
• Familiarity with FinOps concepts and cloud cost‑management practices.
• Exposure to security requirements for data‑intensive, telephony, communications, or AI‑driven cloud workloads.
• Knowledge of agentic AI architectures and associated cloud infrastructure considerations.
• Experience working with XQL or comparable security analytics and query languages.
• Familiarity with enterprise cloud governance and automated compliance enforcement.
• Experience supporting customer‑facing technical engagements or cloud security consulting.
• Understanding of Agile software development and engineering practices.

What We're Looking For

• A cloud security engineer who can combine infrastructure knowledge with practical security automation.
• Someone who can transform security requirements into scalable, enforceable policies and automated guardrails.
• An engineer who enjoys analyzing complex cloud architectures, troubleshooting difficult infrastructure problems, and determining effective root‑cause solutions.
• A technically curious professional who can quickly understand emerging Google Cloud capabilities and evaluate their security implications.
• A collaborative subject matter expert who can work across engineering, security, sales, and customer organizations.
• A strong communicator who can translate complex technical requirements into clear and actionable solutions.
• A proactive problem‑solver who continuously looks for opportunities to improve cloud security, automation, governance, and deployment efficiency.

Technologent is an Equal Opportunity Employer -- EEO/AA Employer/Vet/Disabled -- for reasonable accommodations, please contact us [e-mail]

Technologent is a Global Provider of Edge-to-Edge Information Technology Solutions and Services for Fortune 1000 and SMB companies. We offer a unique blend of business practices that are aligned to solve for top CIO concerns. Our core competencies focus on data center infrastructure, business continuity, data protection, service automation and orchestration, continuous intelligence, monitoring, connectivity, collaboration and cybersecurity. These practices are supported by our professional services, digital transformation services and financial services offerings. By providing custom solutions and services designed to fit your business needs, we enable your organization to be more agile, responsive and competitive. Technologent empowers your company to ascend to the next level in IT.

Headquartered in Irvine, CA, Technologent has offices throughout the US and proudly serves clients around the world. When partnering with Technologent, organizations benefit from the highest caliber of professionals, committed to delivering exceptional business outcomes backed by unmatched service and support.