GCP Cloud Security Engineer — IaC & CIS Hardening

Insight Global; Saint Paul (MN); On-site; USD 140,000 - 180,000; Full time

Job summary

Insight Global is seeking an experienced GCP Cloud Engineer to join a Security Green Team. You will translate vulnerability findings into automated remediation embedded into cloud builds, codifying fixes as infrastructure as code and enforcing guardrails through policy-as-code.

This hands-on role shapes cloud security as it scales. Responsibilities include hardening CI/CD pipelines, coordinating patching, and preparing environments for container/Kubernetes workloads while maintaining security

Qualifications

• 5–10 years of hands-on cloud engineering with GCP.
• Experience hardening GCP to CIS Benchmarks.
• Policy-as-code and guardrails across cloud environments.
• Strong CI/CD and pipeline automation.
• Advanced IaC using Terraform.
• Proficiency in Python and Bash for automation.
• Kubernetes and container security.
• CSPM and vulnerability tooling experience.

Responsibilities

• Assess the current GCP and cloud environment to identify gaps.
• Validate guardrails meet CIS benchmarks and policy requirements.
• Design and implement policy enforcement across GCP via policy-as-code.
• Codify fixes as Infrastructure as Code (Terraform) to prevent reoccurrence.
• Build and harden CI/CD pipelines with dev teams.
• Prepare environment for upcoming container/Kubernetes workloads.
• Coordinate server patching and lifecycle management.
• Maintain dashboards on security posture and remediation velocity.

Skills

GCP

CIS Benchmarks

Policy as Code

CI/CD Pipelines

Terraform

Python

Bash

Kubernetes

Automation

Cloud Security

Vulnerability Scanning

Tools

Terraform

Ansible

Kubernetes

Security Command Center

Tenable

Qualys

Wiz

Prisma Cloud

Job description

Insight Global is seeking an experienced GCP Cloud Engineer to join a Security Green Team. You will translate vulnerability findings into automated remediation embedded into cloud builds, codifying fixes as infrastructure as code and enforcing guardrails through policy-as-code.

This hands-on role shapes cloud security as it scales. Responsibilities include hardening CI/CD pipelines, coordinating patching, and preparing environments for container/Kubernetes workloads while maintaining security