Staff GCP Platform Engineer: Enterprise Cloud Leader

9025 CVS Shared Services Resources LLC; Woonsocket (RI); On-site; USD 130,000 - 261,000; Full time

Benefits offered by this job

Medical, dental, vision

Bonus program

Flexible work arrangements

Job summary

CVS Health is seeking a Staff Cloud Engineer to lead design, build, and operation of secure, scalable GCP landing zones in a highly regulated environment. You will translate architecture into production-grade deployments, influence governance decisions, and drive observability and automation across the cloud platform.

Responsibilities include enterprise GCP architecture, Shared VPC, CMEK, IAM, and guardrails, plus collaboration with security, networking and analytics teams to enable compliant

Qualifications

• Bachelor’s degree or equivalent experience in a relevant field.
• Experience aligning cloud platforms with regulatory requirements.
• Strong collaboration across security, networking, and engineering teams.

Responsibilities

• Design and maintain enterprise GCP Landing Zone capabilities (Shared VPC, Org Policies, etc.).
• Implement IaC and GitOps workflows using Terraform and KCC.
• Deploy and support secure private GKE clusters with best practices.
• Oversee CI/CD and automation infrastructure, including GitHub Actions runners on GKE.
• Manage secrets and encryption lifecycle (Secret Manager, CMEK).
• Participate in on-call rotations and incident response for platform infra.
• Support compliance controls aligned with HIPAA, PCI-DSS, SOC 2, FedRAMP.

Education

Bachelor’s degree in Computer Science, Engineering, or related field

Tools

Terraform

Config Connector (KCC)

GKE

Private Service Connect

VPC Service Controls

Cloud Logging

Job description

CVS Health is seeking a Staff Cloud Engineer to lead design, build, and operation of secure, scalable GCP landing zones in a highly regulated environment. You will translate architecture into production-grade deployments, influence governance decisions, and drive observability and automation across the cloud platform.

Responsibilities include enterprise GCP architecture, Shared VPC, CMEK, IAM, and guardrails, plus collaboration with security, networking and analytics teams to enable compliant