Remote GCP Security Lead – FedRAMP & Compliance Automation

Noblesoft Technologies Inc.; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Noblesoft Technologies Inc. is seeking a GCP Senior Technical Lead to own end-to-end security engineering and automation for the FedRAMP KSIs within Google Cloud Platform.

You will translate compliance mandates into automatable technical specs and guide a technical team to implement secure cloud Architectures. The role emphasizes vulnerability pipelines, CEL rule authoring, and telemetry design, with a focus on IAM least-privilege, audit logging, and collaboration with Governance and 3PAO

Qualifications

• 7+ years in Cloud Security Engineering or DevSecOps.
• Lead/Senior Engineer with FedRAMP (Moderate/High) experience.
• Strong GCP skills: CAI, SCC, IAM, Cloud Audit Logs, Storage.
• CEL scripting proficiency; Python/Go/Reg o knowledge.
• Experience with vulnerability and container scanning tools at scale.
• Experience with Kubernetes/GKE/Borg.
• Familiarity with NIST SP 800-53 Rev 5, CIS Benchmarks, ConMon.
• Bachelor's or Master's in CS/IT/Cybersecurity or equivalent.

Responsibilities

• Lead discovery to translate FedRAMP KSIs into automatable specs.
• Oversee VM and container scanning pipelines (AutoVM, Tenable, Qualys, Nessus).
• Develop CEL evaluation rules for Pass/Fail criteria.
• Design telemetry architecture with log agents and sinks for full coverage.
• Architect least-privilege IAM bindings and VPC Service Controls.
• Collaborate with Governance teams and 3PAO assessors.

Skills

Leadership in Security Engineering

Cloud Security

Automation & Scripting

FedRAMP & NIST knowledge

GCP expertise

Education

Bachelor's or Master's in CS/IT/Cybersecurity

Tools

AutoVM

Tenable

Qualys

Nessus

Artifact Registry

Drydock

Fluent Bit

Vector

Git

Piper

Job description

Noblesoft Technologies Inc. is seeking a GCP Senior Technical Lead to own end-to-end security engineering and automation for the FedRAMP KSIs within Google Cloud Platform.

You will translate compliance mandates into automatable technical specs and guide a technical team to implement secure cloud Architectures. The role emphasizes vulnerability pipelines, CEL rule authoring, and telemetry design, with a focus on IAM least-privilege, audit logging, and collaboration with Governance and 3PAO