GCP Cloud Security Engineer

York Solutions, LLC; Brooklyn Park (MN); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

BCBS Medical

Delta Dental

Eye Med Vision

401(k) Retirement Plan

Remote work opportunities

Job summary

York Solutions seeks an experienced Cloud Security Engineer to drive remediation across GCP, Azure, and AWS. You will develop secure deployment patterns, implement policy-as-code with OPA, and modernize CSPM capabilities.

Collaboration with security, infrastructure, and cloud teams is essential to reduce risk and enable scalable security automation. The role emphasizes Terraform-based code, scripting in Python or Bash, and a strong foundation in cloud networking and IAM within enterprise

Qualifications

• 5+ years of hands-on engineering experience with Google Cloud Platform (GCP).
• 3+ years of production Terraform code development in complex enterprise environments.
• Experience writing, testing, and maintaining Policy-as-Code with Open Policy Agent (OPA).
• Hands-on experience with Wiz for CSPM.
• Strong scripting/automation in Python or Bash within CI/CD pipelines.
• Experience with secure cloud deployment patterns and infrastructure automation.
• Knowledge of cloud/on-prem networking, IAM, compute, storage, databases, and SDN.
• 5+ years of cloud engineering experience in enterprise environments.

Responsibilities

• Define Secure Cloud Deployment Patterns and publish security standards for GCP, Azure, and AWS.
• Modernize CSPM capabilities and implement enterprise-ready CSPM environment.
• Develop Policy-as-Code libraries using Open Policy Agent (OPA) to enforce standards.
• Collaborate with cloud engineering, infrastructure, and security teams to remediate risks.
• Develop scalable automation and security controls to improve cloud governance and reduce risk.

Skills

Cloud security engineering

Python

Bash

CI/CD automation

Policy-as-Code

Open Policy Agent (OPA)

Cloud networking

Terraform

GCP expertise

Azure/AWS knowledge

Education

Bachelor's degree in CS/IT or related field

Tools

Terraform

Open Policy Agent (OPA)

Wiz

GitHub/GitHub Actions

Job description

Description ***At this time, we are unable to consider candidates requiring visa sponsorship or third-party recruitment agencies for this role. We thank you for your understanding.***

Overview

We are looking for an experienced Cloud Security Engineer to drive the remediation of our public cloud platforms (GCP, Azure, and AWS). In this role, you will help improve the cloud security posture by developing secure cloud deployment patterns, implementing policy-as-code, and modernizing our Cloud Security Posture Management (CSPM) capabilities. You will work at the intersection of cloud infrastructure, backend
systems, networking, and security engineering to deliver scalable, automated security solutions across the enterprise.

Location

Hybrid 2 days / week onsite in Brooklyn Park, MN

Responsibilities

• Define Secure Cloud Deployment Patterns: Develop and publish security standards and reference architectures for common cloud deployment patterns in GCP, Azure, and AWS. Build reusable Terraform modules and automation scripts to enable secure adoption by engineering teams.
• Modernize CSPM Capabilities: Evaluate, test, and implement Cloud Security Posture Management (CSPM) solutions, with a strong focus on Wiz, and partner with key stakeholders to build an enterprise-ready CSPM environment across our public cloud footprint.
• Policy-as-Code: Design, develop, test, and maintain enterprise Policy-as-Code libraries using Open Policy Agent (OPA) to enforce secure cloud deployment standards and automate compliance across cloud environments.
• Collaborate with cloud engineering, infrastructure, and security teams to identify and remediate cloud security risks.
• Develop scalable automation and security controls that improve cloud governance and reduce operational risk.

Required Qualifications

• Current Google Cloud Professional (GCP) Certification is required.
• 5+ years of hands-on engineering experience supporting Google Cloud Platform (GCP).
• 3+ years of experience developing and maintaining production Terraform code in complex enterprise environments.
• Proven experience writing, testing, and maintaining Policy-as-Code using Open Policy Agent (OPA) to enforce cloud security standards. Experience building reusable policy libraries is required.
• Hands-on experience with Wiz for Cloud Security Posture Management (CSPM), including identifying, prioritizing, and remediating cloud security risks.
• Strong scripting and automation experience using Python, Bash, or similar languages within CI/CD pipelines.
• Experience designing secure cloud deployment patterns and infrastructure automation.
• Strong understanding of cloud and on-premises networking, IAM, compute, storage, databases, and software-defined networking (SDN).
• Experience securing enterprise cloud environments and implementing cloud security best practices.
• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience).
• 5+ years of Cloud Engineering experience in enterprise environments.
• Strong analytical and problem-solving skills with the ability to resolve complex technical issues independently.
• Ability to understand existing cloud architectures and develop scalable remediation strategies while minimizing operational risk.
• Strong communication and collaboration skills with experience working in Agile environments.
• Demonstrated commitment to continuous learning and staying current with evolving cloud and security technologies.

Preferred Qualifications

• Experience supporting Azure and/or AWS environments.
• Experience with GitHub, GitHub Actions, or Atlantis.
• Combination of infrastructure engineering and cloud security experience.
• Experience evaluating or implementing enterprise cloud security tooling and security automation frameworks.

Benefits

York Solutions Offers a generous benefits package for eligible full-time employees:

• BCBS Medical with 3 Plans to choose from (PPO and High deductible PPO plans with Health Savings Program)
• Delta Dental plan with 2 free cleanings and insurance discounts
• Eye Med Vision with annual check-ups and discounts on lens
• Life and Accidental Death Insurance paid by company
• John Hancock 401(k) Retirement Plan with discretionary company match
• Voluntary Insurance programs such as: Hospital Indemnity, Identity Protection, Legal Insurance, Long Term Care, and Pet Insurance.
• Flexible work environment with some remote working opportunities
• Strong fun and teamwork environment
• Learning, development, and career growth