GCP Senior Technical Lead

Noblesoft Technologies Inc.; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Noblesoft Technologies Inc. is seeking a GCP Senior Technical Lead to own end-to-end security engineering and automation for the FedRAMP KSIs within Google Cloud Platform.

You will translate compliance mandates into automatable technical specs and guide a technical team to implement secure cloud Architectures. The role emphasizes vulnerability pipelines, CEL rule authoring, and telemetry design, with a focus on IAM least-privilege, audit logging, and collaboration with Governance and 3PAO

Qualifications

• 7+ years in Cloud Security Engineering or DevSecOps.
• Lead/Senior Engineer with FedRAMP (Moderate/High) experience.
• Strong GCP skills: CAI, SCC, IAM, Cloud Audit Logs, Storage.
• CEL scripting proficiency; Python/Go/Reg o knowledge.
• Experience with vulnerability and container scanning tools at scale.
• Experience with Kubernetes/GKE/Borg.
• Familiarity with NIST SP 800-53 Rev 5, CIS Benchmarks, ConMon.
• Bachelor's or Master's in CS/IT/Cybersecurity or equivalent.

Responsibilities

• Lead discovery to translate FedRAMP KSIs into automatable specs.
• Oversee VM and container scanning pipelines (AutoVM, Tenable, Qualys, Nessus).
• Develop CEL evaluation rules for Pass/Fail criteria.
• Design telemetry architecture with log agents and sinks for full coverage.
• Architect least-privilege IAM bindings and VPC Service Controls.
• Collaborate with Governance teams and 3PAO assessors.

Skills

Leadership in Security Engineering

Cloud Security

Automation & Scripting

FedRAMP & NIST knowledge

GCP expertise

Education

Bachelor's or Master's in CS/IT/Cybersecurity

Tools

AutoVM

Tenable

Qualys

Nessus

Artifact Registry

Drydock

Fluent Bit

Vector

Git

Piper

Job description

Job Title/Role : GCP Senior Technical Lead

Mandatory Skills GCP JD Security Engineering SME (GCP Vulnerability & Compliance)

Location: US Remote

On w2

Experience Level: Senior (7+ years) Role Overview The Lead Security Engineer is the primary technical lead responsible for the end-to-end engineering and automation of the FedRAMP Key Security Indicator (KSI) initiative. This role bridges the gap between regulatory compliance and hands‑on cloud engineering. The Lead Engineer will design automated cloud controls, manage GCP security vulnerability pipelines, and guide a technical team in deploying solutions that ensure continuous monitoring and secure architectures across Google Cloud Platform (GCP).

Key Responsibilities

• Technical Leadership & Translation: Lead discovery workshops to deconstruct FedRAMP KSIs and NIST SP 800-53 controls, translating high-level compliance mandates into binary, automatable technical specifications.
• Vulnerability Management & Pipelines: Oversee and implement VM vulnerability scanning (AutoVM, Tenable, Qualys, Nessus), container image scanning (Artifact Registry / Drydock), and static/dynamic analysis tools.
• Automation & Scripting: Analyze Google Cloud Asset Inventory (CAI) schemas and oversee the authoring and testing of Common Expression Language (CEL) evaluation rules to define precise Pass/Fail criteria for cloud controls.
• Pipeline & Telemetry Architecture: Design, deploy, and troubleshoot log agents (Fluentbit/Vector) and Cloud Logging sinks to ensure 100% telemetry coverage across container nodes, VMs, and control‑plane APIs.
• Identity & Access Management (IAM): Architect and enforce least‑privilege IAM bindings, service accounts, and VPC Service Controls across the GCP environment.
• Validation & Deployment: Test logic against synthetic resources in sandbox environments to minimize false positives, manage codebase version control (Git/Piper), and support progressive deployment rollouts.
• Cross‑Functional Collaboration: Act as the technical bridge for the project, supporting gap analyses and providing engineering evidence to Governance teams and 3PAO assessors.

Qualifications & Requirements

• Experience: 7+ years in Cloud Security Engineering, DevSecOps, or Infrastructure Security, with proven experience as a Lead/Senior Engineer managing FedRAMP (Moderate/High) security vulnerability implementations.
• Cloud Platform Expertise: Strong, hands‑on background in Google Cloud Platform (GCP), specifically with Cloud Asset Inventory (CAI), Security Command Center (SCC), IAM, Cloud Audit Logs, and Cloud Storage.
• Scripting & Languages: Advanced proficiency in Common Expression Language (CEL). Working knowledge of Python, Go, or Rego/OPA.
• Vulnerability Tooling: Practical experience configuring and automating vulnerability and container scanning tools in a large‑scale cloud environment.
• Systems & Infrastructure: Experience with Google Cloud infrastructure and container orchestration (Kubernetes/GKE/Borg).
• Compliance Knowledge: Strong familiarity with automated control evaluation for NIST SP 800-53 Rev 5, CIS Benchmarks, and FedRAMP Continuous Monitoring (ConMon).
• Education: Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.