GCP DevOps & Security Engineer – Landing Zones

Global Technology Solutions Inc. (GTS); United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Global Technology Solutions Inc. in the United States is seeking a skilled GCP DevOps Engineer to lead the design and implementation of secure, enterprise-ready GCP landing zones, aligning with rigorous security and governance standards.

You will work closely with clients and internal teams to ensure scalable, compliant cloud deployments. The role emphasizes IAM, network security, infrastructure as code, and integration of security into CI/CD pipelines, with a focus on Zero Trust, threat

Qualifications

• 3+ years in DevOps, cloud engineering, or platform/infrastructure roles.
• 3+ years hands-on experience with Google Cloud Platform (GCP), focusing on foundations, networking, and security.
• Experience designing and deploying enterprise GCP Landing Zones (CFT or equivalent).
• Strong background in cloud security architecture, IAM, and network security design.
• Proven experience integrating security into CI/CD workflows and automating policy enforcement.
• Experience in regulated environments or with compliance frameworks (SOC 2, NIST, CIS, ISO 27001, or FedRAMP).

Responsibilities

• GCP Architecture: Design and configure secure, enterprise-ready GCP landing zones tosupportPoC's, Pilots, and full-scale deployments without requiring future migrations.
• Domain Expertise: Provide specialized knowledge in IAM and Cloud Networking.
• Advisory & Collaboration: Lead workshops with cross-functional client teams to review current setups, ensure adherence to best practices, and provide official strategic recommendations.
• Security & Compliance: Ensure all platform enablement strictly follow established enterprise security policies and procedures
• Develop and enforce cloud security baselines, guardrails, and governance policies across GCP organizations, folders, and projects.
• Implement and manage Infrastructure as Code (IaC) for cloud foundations, including VPC architecture, shared services, and connectivity patterns.
• Integrate security tooling and controls into CI/CD pipelines (shift-left security), including static analysis, secrets detection, container scanning, and policy enforcement.
• Lead the design and implementation of Zero Trust network architecture, identity federation, and least privilege access models.
• Define and manage Security Command Center (SCC), Chronicle SIEM, and other GCP-native security tooling for continuous monitoring and threat detection.
• Conduct threat modeling, risk assessments, and security reviews for new infrastructure patterns and cloud-native services.
• Collaborate with compliance teams to maintain alignment with frameworks such as CIS Benchmarks, NIST 800-53, SOC 2, FedRAMP, or equivalent.
• Automate security and compliance controls using policy-as-code tools (OPA/Rego, Terraform Sentinel, Forseti/Config Validator).
• Respond to and remediate security incidents, vulnerabilities, and misconfigurations across the cloud estate.
• Mentor teams on cloud security best practices and drive a culture of shared security ownership.
• Lead development and maintenance of standardization templates to be used for discovery by sales and implementation teams in ensuring client security requirements are well documented.

Skills

DevOps experience

GCP expertise

IAM & security design

CI/CD security integration

Networking security

Tools

Terraform

GKE

Checkov/tfsec

Job description

Global Technology Solutions Inc. in the United States is seeking a skilled GCP DevOps Engineer to lead the design and implementation of secure, enterprise-ready GCP landing zones, aligning with rigorous security and governance standards.

You will work closely with clients and internal teams to ensure scalable, compliant cloud deployments. The role emphasizes IAM, network security, infrastructure as code, and integration of security into CI/CD pipelines, with a focus on Zero Trust, threat