GCP Cloud Security Engineer: CSPM & Policy-as-Code

York Solutions, LLC; Brooklyn Park (MN); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

BCBS Medical

Delta Dental

Eye Med Vision

401(k) Retirement Plan

Remote work opportunities

Job summary

York Solutions seeks an experienced Cloud Security Engineer to drive remediation across GCP, Azure, and AWS. You will develop secure deployment patterns, implement policy-as-code with OPA, and modernize CSPM capabilities.

Collaboration with security, infrastructure, and cloud teams is essential to reduce risk and enable scalable security automation. The role emphasizes Terraform-based code, scripting in Python or Bash, and a strong foundation in cloud networking and IAM within enterprise

Qualifications

• 5+ years of hands-on engineering experience with Google Cloud Platform (GCP).
• 3+ years of production Terraform code development in complex enterprise environments.
• Experience writing, testing, and maintaining Policy-as-Code with Open Policy Agent (OPA).
• Hands-on experience with Wiz for CSPM.
• Strong scripting/automation in Python or Bash within CI/CD pipelines.
• Experience with secure cloud deployment patterns and infrastructure automation.
• Knowledge of cloud/on-prem networking, IAM, compute, storage, databases, and SDN.
• 5+ years of cloud engineering experience in enterprise environments.

Responsibilities

• Define Secure Cloud Deployment Patterns and publish security standards for GCP, Azure, and AWS.
• Modernize CSPM capabilities and implement enterprise-ready CSPM environment.
• Develop Policy-as-Code libraries using Open Policy Agent (OPA) to enforce standards.
• Collaborate with cloud engineering, infrastructure, and security teams to remediate risks.
• Develop scalable automation and security controls to improve cloud governance and reduce risk.

Skills

Cloud security engineering

Python

Bash

CI/CD automation

Policy-as-Code

Open Policy Agent (OPA)

Cloud networking

Terraform

GCP expertise

Azure/AWS knowledge

Education

Bachelor's degree in CS/IT or related field

Tools

Terraform

Open Policy Agent (OPA)

Wiz

GitHub/GitHub Actions

Job description

York Solutions seeks an experienced Cloud Security Engineer to drive remediation across GCP, Azure, and AWS. You will develop secure deployment patterns, implement policy-as-code with OPA, and modernize CSPM capabilities.

Collaboration with security, infrastructure, and cloud teams is essential to reduce risk and enable scalable security automation. The role emphasizes Terraform-based code, scripting in Python or Bash, and a strong foundation in cloud networking and IAM within enterprise