Cyber Security Specialist

Themesoft Inc.; Phoenix (AZ); On-site; USD 120,000 - 150,000; Full time

Job summary

Themesoft Inc is seeking a security-focused Cloud Engineer with 5+ years of Google Cloud experience. You will implement policy-as-code (Sentinel) and Terraform-based controls, driving secure-by-default deployments across cloud platforms.

You will collaborate with engineering, sales, and customer teams to resolve deployment obstacles and define scalable governance standards for Compute, Storage, and Networking. Applicants must be authorized to work in the U.S.

Qualifications

• Bachelor's or master's degree in CS/CE or equivalent work experience.
• 5+ years of experience with Google Cloud IAM, VPC, Cloud Logging, and compute/storage.
• Experience with Policy as Code (Sentinel) and Terraform.
• Security-focused cloud architecture and governance experience.

Responsibilities

• Define and develop policy-as-code frameworks for IaC pipelines (Terraform).
• Improve policy enforcement and guardrails across cloud platforms.
• Consult internal stakeholders to resolve deployment obstacles.

Skills

GCP IAM

Terraform

Sentinel

Cloud Logging

Education

Bachelor's or master's degree in computer science, computer engineering, or other technical discipline, or equivalent work experience

Tools

Terraform

Sentinel

Job description

• Bachelor's or master's degree in computer science, computer engineering, or other technical discipline, or equivalent work experience
• 1-5 + years of experience with Google Cloud Infrastructure foundational capabilities IAM, VPC, Cloud Logging, Security controls, Storage and Compute
• 1-5 + years of experience with Policy as a Code (Sentinel), Infrastructure automation tools (Terraform) and with a focus on implementing security controls for all type of cloud native infrastructure
• Evaluating the cloud native offerings and documenting controls, standards, processes, and procedures
• Perform feasibility of study to define the convert the controls into scope for policy as a code enablement
• Define and developing policy-as-code frameworks (e.g., Sentinel and cloud native) for Infrastructure-as-Code deployment pipeline (e.g., Terraform)
• Improve PaC (policy-as-code) and guardrails (Sentinel, native cloud policies) by closely working with CNAPP to enforce secure-by-default configurations across cloud platforms
• In-depth understanding of Public Cloud native offerings related to Compute, Storage, Data, Telephony, Agentic AI and underlying architectures for troubleshooting, reproducing, and determining the root cause for customer-reported issues and enabling policies
• Understanding of cloud architecture to ensure high availability while ensuring the highest level of security and visibility
• Experience with Network Isolation, Data Security, Identity, Logging and Monitoring tools such as Cloud logging, metrics, XQL and other mechanism
• FinOps (cloud) domain knowledge preferred
• Software development experience in one of the OO programming language: Java, Go and or Python
• Ability to effectively interpret technical and business objectives and challenges and articulate solutions
• Willingness to learn new technologies quickly and exploit them to their optimal potential
• Act as consultant and subject matter expert for internal stakeholders in engineering, sales, customer organizations to resolve technical deployment obstacles and improve Google Cloud Infrastructure

Every member of the Software Engineering team should be able to demonstrate the following technical, functional, leadership, and business skills:

• Programming Languages and Framework Development
• Analytical Thinking
• Google Cloud Security & Infrastructure - Strong experience with GCP services including IAM, VPC, Cloud Logging, Security Controls, Compute, and Storage, with a solid understanding of cloud-native architecture and security.
• Policy as Code (PaC) & Terraform - Hands-on expertise in implementing Policy-as-Code using Sentinel and Infrastructure-as-Code using Terraform, including cloud security guardrails and automated policy enforcement.
• Cloud Security Engineering & CNAPP - Experience defining security controls, standards, and governance frameworks, along with expertise in Network Security, Identity, Data Security, Logging/Monitoring, and CNAPP-driven secure-by-default cloud deployments.

Work Authorization:

Applicants must be legally authorized to work in the United States.

Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.