Principal Cloud Engineer

Jobtailor

Houston (TX)

Hybrid

USD 150,000 - 190,000

Full time

4 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

GXO is hiring a senior cloud/platform engineer to build and scale a secure Google Cloud Foundation in Houston. You will own the enterprise GCP architecture, IAM, Shared VPC, and KMS/CMEK while delivering repeatable Terraform modules and production-grade GKE platforms.

You will drive automation with CI/CD, GitOps, and Vaulted security controls, collaborating with EA, Security, and data teams to enable enterprise AI workloads on Google Cloud.

Qualifications

BS/technical degree or equivalent work experience.
Google Cloud Cloud Architect cert preferred.
10–15+ years in cloud/platform engineering or distributed systems.
5–7+ years designing and operating enterprise GCP environments.

Responsibilities

Build and scale GXO's Google Cloud foundation with IAM, VPC, and logging.
Develop Terraform modules and secure-by-default deployment patterns.
Operate production-grade GKE platforms with observability and runbooks.
Implement CI/CD via Cloud Build and GitHub Actions for automation.
Partner with security and EA teams for zero-trust cloud operations.

Skills

Google Cloud Platform

Terraform

GKE Operations

Zero-Trust Security

CI/CD Pipelines

Education

Bachelor's degree in Computer Science or related field

Tools

GitOps

Cloud Build

Artifact Registry

IAP

Kubernetes Engine

Job description

Build and scale GXO's Google Cloud Platform foundation, including organization hierarchy, landing zones, Shared VPC, IAM, Workload Identity Federation, Secret Manager, Cloud KMS/CMEK, IAP, and Cloud Logging and Monitoring
Develop reusable Terraform modules, project factory patterns, secure-by-default configurations, and standardized deployment patterns
Engineer and operate production-grade Google Kubernetes Engine platforms, including cluster architecture, networking, ingress/egress, autoscaling, observability, and operational runbooks
Translate enterprise architecture into secure, scalable, production-ready cloud implementations
Build Infrastructure as Code standards through Terraform modules, GitOps workflows, CI/CD pipelines, policy guardrails, and platform automation
Develop and maintain CI/CD pipelines using Cloud Build, GitHub Actions, Artifact Registry, and related cloud-native tooling
Automate cloud platform operations and integrate Google Cloud APIs
Engineer enterprise networking capabilities including Shared VPC, Private Service Connect, VPC Service Controls, Cloud NAT, firewall policies, segmentation, Cloud Interconnect, and High Availability VPN
Partner with Information Security to implement zero-trust cloud security, encryption, secrets management, audit logging, and data protection controls
Integrate Security Command Center, CSPM tooling, automated compliance, monitoring, alerting, tracing, and reliability engineering practices
Build self-service platform capabilities for product, data, and AI engineering teams while maintaining enterprise governance
Embed FinOps practices including cost attribution, budgeting, rightsizing, committed use planning, tagging standards, and cloud cost optimization
Engineer the Google Cloud foundation supporting GXO's Enterprise AI Platform, including GKE-based runtimes, AI gateways, model services, agent runtimes, MCP servers, Agent Registry, and governed Snowflake integrations
Partner with Data Engineering, Security, and Enterprise Architecture to deliver secure AI infrastructure supporting inference, agent execution, identity passthrough, and end-to-end traceability
Write Terraform, review pull requests, troubleshoot complex cloud issues, mentor engineers, and raise engineering standards

Requirements

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, or equivalent work experience
Google Cloud Professional Cloud Architect certification
10–15+ years of experience in cloud engineering, platform engineering, infrastructure engineering, or distributed systems
5–7+ years of hands‑on experience designing, building, and operating enterprise-scale Google Cloud environments
Experience building and scaling enterprise cloud platforms
Deep expertise in Google Cloud resource hierarchy, organization policies, IAM, Workload Identity Federation, networking, Shared VPC, Cloud KMS/CMEK, Identity‑Aware Proxy (IAP), logging, monitoring, and secure cloud operations
Extensive hands‑on experience with Google Kubernetes Engine (GKE), Kubernetes networking, autoscaling, Cloud Run, ingress/egress, and production operations
Strong experience implementing Infrastructure as Code using Terraform, GitOps, CI/CD pipelines, Artifact Registry, and policy‑as‑code
Proven expertise implementing zero‑trust cloud security, including least privilege access, Binary Authorization, encryption, secrets management, audit logging, and secure operational controls
Experience implementing enterprise observability, reliability engineering, and FinOps practices
Experience building reusable platform engineering capabilities and self‑service cloud infrastructure
Experience supporting enterprise AI, analytics, machine learning, or LLM platforms on Google Cloud
Strong written and verbal communication skills, with experience documenting engineering standards, technical designs, and operational runbooks
Ability to mentor engineers and collaborate with architects, security teams, infrastructure teams, and technology partners
Ability to operate effectively with minimal supervision in a fast‑paced, global enterprise environment
Preferred certifications: Google Cloud Professional Security Engineer, Google Cloud Professional DevOps Engineer, Google Cloud Professional Machine Learning Engineer, CKA or CKAD, HashiCorp Terraform Associate
Preferred experience with Vertex AI, Gemini Enterprise Agent Platform, LiteLLM, MCP, AI gateways, agent runtimes, or comparable technologies
Preferred experience integrating Google Cloud workloads with Snowflake using OAuth, RBAC, masking policies, row‑level security, and governed data access
Preferred experience implementing enterprise FinOps practices and secure multi‑tenant cloud platforms

Core Competencies

Demonstrates expertise in building and scaling Google Cloud Platform foundations, implementing Infrastructure as Code with Terraform, and ensuring secure cloud operations through zero‑trust security practices. Proven ability to mentor engineers and collaborate across teams to deliver enterprise‑grade cloud solutions.

Highest-signal resume keywords