Principal Cloud Engineer

GXO Logistics, Inc.; Greenwich (CT); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Health insurance

401(k)

Life insurance

Disability

Job summary

GXO Logistics, Inc. is seeking a Principal Cloud Engineer, Google Cloud, to lead our Google Cloud Platform initiatives, build secure production-grade infrastructure, Kubernetes, and enterprise AI platform capabilities.

You will work with architects, security teams, and engineering partners to translate cloud strategy into scalable, resilient solutions powering GXO's platforms. You'll develop reusable Terraform modules, GitOps workflows, CI/CD pipelines, and platform automation, while mentoring

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, or equivalent work experience.
• Google Cloud Professional Cloud Architect certification.
• 10–15+ years of experience in cloud engineering, platform engineering, infrastructure engineering, or distributed systems.
• 5–7+ years of hands‑on experience designing, building, and operating enterprise‑scale Google Cloud environments.
• Deep expertise in Google Cloud resource hierarchy, IAM, networking, Shared VPC, and secure cloud operations.
• Extensive hands‑on experience with GKE, Kubernetes networking, autoscaling, and production operations.

Responsibilities

• Build and scale GXO's Google Cloud Platform foundation, including organization hierarchy, landing zones, Shared VPC, IAM, Workload Identity Federation, Secret Manager, Cloud KMS/CMEK, Identity-Aware Proxy (IAP), and Cloud Logging and Monitoring.
• Develop reusable Terraform modules, project factory patterns, secure-by-default configurations, and standardized deployment patterns across multiple environments.
• Engineer and operate production-grade Google Kubernetes Engine (GKE) platforms, including cluster architecture, networking, ingress/egress, autoscaling, observability, and operational runbooks.
• Translate enterprise architecture into secure, scalable, production-ready cloud implementations.
• Build Infrastructure as Code (IaC) standards through reusable Terraform modules, GitOps workflows, CI/CD pipelines, policy guardrails, and platform automation.
• Develop and maintain CI/CD pipelines using Cloud Build, GitHub Actions, Artifact Registry, and related cloud-native tooling.
• Automate cloud platform operations, integrate Google Cloud APIs, and reduce operational overhead through engineering best practices.
• Engineer enterprise networking capabilities including Shared VPC, Private Service Connect, VPC Service Controls, Cloud NAT, firewall policies, segmentation, Cloud Interconnect, and High Availability VPN.
• Partner with Information Security to implement zero-trust cloud security including least privilege access, Workload Identity Federation, Binary Authorization, encryption, secrets management, audit logging, and data protection controls.
• Integrate Security Command Center, CSPM tooling, automated compliance, monitoring, alerting, tracing, and reliability engineering practices into the cloud platform.
• Build self‑service platform capabilities that enable product, data, and AI engineering teams to rapidly consume cloud services while maintaining enterprise governance.
• Embed FinOps practices including cost attribution, budgeting, rightsizing, committed use planning, tagging standards, and cloud cost optimization.

Skills

Google Cloud

Kubernetes

Terraform

GitOps

CI/CD

Security

FinOps

Leadership

Mentoring

Networking

Education

Bachelor's degree in Computer Science / IT / Engineering

Tools

Terraform

GitHub Actions

Artifact Registry

IAM / KMS

Job description

Logistics at full potential.

At GXO, we’re constantly looking for talented individuals at all levels who can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our team, you’ll have the support to excel at work and the resources to build a career you can be proud of.

Principal Cloud Engineer

Are you ready to take your career to the next level with a rapidly growing global company? As the Principal Cloud Engineer, Google Cloud, you will serve as one of GXO's senior technical leaders responsible for building, implementing, and scaling our Google Cloud Platform. This is a deeply hands‑on engineering role focused on delivering secure, production‑ready cloud infrastructure, platform automation, Kubernetes, networking, and enterprise AI platform capabilities. Working alongside architects, security teams, and engineering partners, you'll transform cloud strategy into scalable, resilient, and operational solutions that power GXO's next generation of enterprise platforms.

Pay, Benefits And More

We are eager to attract the best, so we offer competitive compensation and a generous benefits package.

• full health insurance (medical, dental and vision)
• 401(k)
• life insurance
• disability
• and more

What You’ll Do On a Typical Day

• Build and scale GXO's Google Cloud Platform foundation, including organization hierarchy, landing zones, Shared VPC, IAM, Workload Identity Federation, Secret Manager, Cloud KMS/CMEK, Identity-Aware Proxy (IAP), and Cloud Logging and Monitoring.
• Develop reusable Terraform modules, project factory patterns, secure-by-default configurations, and standardized deployment patterns across multiple environments.
• Engineer and operate production-grade Google Kubernetes Engine (GKE) platforms, including cluster architecture, networking, ingress/egress, autoscaling, observability, and operational runbooks.
• Translate enterprise architecture into secure, scalable, production-ready cloud implementations.
• Build Infrastructure as Code (IaC) standards through reusable Terraform modules, GitOps workflows, CI/CD pipelines, policy guardrails, and platform automation.
• Develop and maintain CI/CD pipelines using Cloud Build, GitHub Actions, Artifact Registry, and related cloud-native tooling.
• Automate cloud platform operations, integrate Google Cloud APIs, and reduce operational overhead through engineering best practices.
• Engineer enterprise networking capabilities including Shared VPC, Private Service Connect, VPC Service Controls, Cloud NAT, firewall policies, segmentation, Cloud Interconnect, and High Availability VPN.
• Partner with Information Security to implement zero-trust cloud security including least privilege access, Workload Identity Federation, Binary Authorization, encryption, secrets management, audit logging, and data protection controls.
• Integrate Security Command Center, CSPM tooling, automated compliance, monitoring, alerting, tracing, and reliability engineering practices into the cloud platform.
• Build self‑service platform capabilities that enable product, data, and AI engineering teams to rapidly consume cloud services while maintaining enterprise governance.
• Embed FinOps practices including cost attribution, budgeting, rightsizing, committed use planning, tagging standards, and cloud cost optimization.
• Engineer the Google Cloud foundation supporting GXO's Enterprise AI Platform, including GKE‑based runtimes, AI gateways, model services, agent runtimes, MCP servers, Agent Registry, and governed Snowflake integrations.
• Partner with Data Engineering, Security, and Enterprise Architecture to deliver secure AI infrastructure supporting inference, agent execution, identity passthrough, and end‑to‑end traceability.
• Serve as a senior hands‑on engineer by writing Terraform, reviewing pull requests, troubleshooting complex cloud issues, mentoring engineers, and raising engineering standards across the organization.

What You Need To Succeed At GXO

At a minimum, you’ll need

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, or equivalent work experience.
• Google Cloud Professional Cloud Architect certification.
• 10–15+ years of experience in cloud engineering, platform engineering, infrastructure engineering, or distributed systems.
• 5–7+ years of hands‑on experience designing, building, and operating enterprise‑scale Google Cloud environments.
• Demonstrated experience building and scaling enterprise cloud platforms rather than solely operating existing environments.
• Deep expertise in Google Cloud resource hierarchy, organization policies, IAM, Workload Identity Federation, networking, Shared VPC, Cloud KMS/CMEK, Identity‑Aware Proxy (IAP), logging, monitoring, and secure cloud operations.
• Extensive hands‑on experience with Google Kubernetes Engine (GKE), Kubernetes networking, autoscaling, Cloud Run, ingress/egress, and production operations.
• Strong experience implementing Infrastructure as Code using Terraform, GitOps, CI/CD pipelines, Artifact Registry, and policy‑as‑code.
• Proven expertise implementing zero‑trust cloud security including least privilege access, Binary Authorization, encryption, secrets management, audit logging, and secure operational controls.
• Experience implementing enterprise observability, reliability engineering, and FinOps practices for cloud platforms.
• Experience building reusable platform engineering capabilities and self‑service cloud infrastructure.
• Experience supporting enterprise AI, analytics, machine learning, or large language model (LLM) platforms on Google Cloud.
• Strong written and verbal communication skills with experience documenting engineering standards, technical designs, and operational runbooks.
• Demonstrated ability to mentor engineers while collaborating effectively with architects, security teams, infrastructure teams, and technology partners.
• Ability to operate effectively with minimal supervision in a fast‑paced, global enterprise environment.

It’d be great if you also have

• Google Cloud Professional Security Engineer certification.
• Google Cloud Professional DevOps Engineer certification.
• Google Cloud Professional Machine Learning Engineer certification.
• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD).
• HashiCorp Terraform Associate certification.
• Experience supporting AI platforms utilizing Vertex AI, Gemini Enterprise Agent Platform, LiteLLM, MCP, AI gateways, agent runtimes, or comparable technologies.
• Experience integrating Google Cloud workloads with Snowflake using OAuth, RBAC, masking policies, row‑level security, and governed data access.
• Experience implementing enterprise FinOps practices for large‑scale cloud environments.
• Experience building secure multi‑tenant cloud platforms and reusable engineering frameworks.
• Demonstrated success collaborating across enterprise architecture, cloud engineering, security, and infrastructure organizations while contributing to shared engineering standards and best practices.

We engineer faster, smarter, leaner supply chains.

GXO is a leading provider of cutting‑edge supply chain solutions to the most successful companies in the world. We help our customers manage their goods most efficiently using our technology and services. Our greatest strength is our global team – energetic, innovative people of all experience levels and talents who make GXO a great place to work.

We are proud to be an Equal Opportunity employer including Disabled/Veterans.

GXO adheres to CDC, OSHA and state and local requirements regarding COVID safety. All employees and visitors are expected to comply with GXO policies which are in place to safeguard our employees and customers.

All applicants who receive a conditional offer of employment may be required to take and pass a pre‑employment drug test.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified. All employees may be required to perform duties outside of their normal responsibilities from time to time, as needed. Review GXO's candidate privacy statement here.