Sr Staff Configuration Engineer

Google Cloud (Google Cloud Platform) Security & Governance Engineer
Westminster, CO
6 months Contract

Job Summary

• Senior Google Cloud Platform Security & Governance Engineer role.
• Design, implement, and operationalize cloud governance framework for Google Cloud Platform expansion.
• Collaborate with governance team to implement security controls, project configuration standards, financial governance, and IAM models.
• Build scalable, repeatable governance patterns aligned with mature AWS models.

What You’ll Do
Governance & Security

• Implement Google Cloud Platform Organization & Project Governance.
• Design/manage Google Cloud Platform Organization, Folder, and Project structures.
• Define/enforce governance guardrails using IAM, Org Policies, and security controls.
• Architect/manage SSO, MFA, and identity federation for Google Cloud Platform access.
• Establish billing structures, budgets, labeling standards, and cost controls.
• Build/maintain Infrastructure as Code frameworks (Terraform) to automate governance.
• Troubleshoot complex platform-level issues and enable safe adoption.
• Align Google Cloud Platform governance practices with AWS governance models.
• Implement standardized project creation workflows (naming conventions, labels, billing, baseline configs).
• Maintain organization-level policies (Org Policies) to enforce guardrails.

Enable Security & Compliance

• Implement existing client security standards in Google Cloud Platform (e.g., Wiz.io CSPM, vulnerability management).
• Configure/manage Okta SSO across Google Cloud Platform footprint.
• Centralize security monitoring, logging, and alerting.
• Partner with project owners/security teams to remediate findings.
• Support compliance initiatives (auditability, evidence collection, policy enforcement).

Financial Governance (FinOps)

• Establish billing account structures, budgets, alerts, and cost controls.
• Enforce consistent resource labeling and cost allocation standards.
• Create/maintain cost and usage reports for visibility/accountability.
• Partner with finance/engineering teams to optimize cloud spend.

Platform Configuration & Operations

• Define standard configurations for networking (VPCs, shared VPCs, firewall rules), logging, monitoring.
• Automate governance controls/configurations using Infrastructure as Code (Terraform).
• Troubleshoot Google Cloud Platform platform issues and guide engineering teams.
• Maintain documentation, standards, and runbooks for governance processes.

Cross-Cloud Alignment

• Align Google Cloud Platform governance practices with AWS governance/security models.
• Contribute to unified multi-cloud governance strategy.

Required Qualifications

• 5+ years hands-on Google Cloud Platform experience (organization/platform level).
• 5+ years implementing Google Cloud Platform IAM, Org Policies, billing management.
• 3+ years implementing cloud governance frameworks/security controls in Google Cloud Platform.
• 3+ years using Infrastructure as Code tools (Terraform strongly preferred).
• 3+ years managing identity federation, SSO, MFA in cloud environments.

Preferred Qualifications

• Experience building/operating enterprise-scale Google Cloud Platform environments.
• Familiarity with AWS governance models (Control Tower, SCPs).
• Experience with Security Command Center, Cloud Logging, Cloud Monitoring.
• Knowledge of FinOps practices in cloud environments.
• Experience supporting regulated/compliance-driven environments.
• Strong troubleshooting/problem-solving skills.
• Ability to work cross-functionally with security, finance, and engineering teams.

Success Metrics

• Google Cloud Platform projects managed within governance frameworks.
• Projects created consistently, securely, and auditable.
• Security and cost risks proactively identified and controlled.
• Engineers adopt Google Cloud Platform safely without bypassing governance.
• Leadership has clear visibility into security posture and cloud spend.

Technical Skills

• Must Have: Google Cloud Platform (Google Cloud Platform).
• Nice to Have: Amazon Web Services (AWS).

Metasys Technologies is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identify, national origin, veteran or disability status.