Senior Cloud Engineer

We are looking for a Senior Cloud Engineer to join our team.

In this role, you will work on designing and securing cloud infrastructure for complex, enterprise-scale environments.

You will collaborate with cross-functional teams to deliver robust, compliant, and innovative cloud solutions that support business objectives.

ResponsibilitiesDesign and architect secure cloud infrastructure to meet organizational needsImplement and manage cloud security policies and services, focusing on best practices and complianceConduct security threat analysis and develop mitigation strategies to protect cloud environmentsDefine and enforce security strategies and governance requirements across cloud platformsCollaborate with SOC and SecOps teams to support regulatory compliance and audit readinessManage Identity and Access Management (IAM), including resource hierarchies, boundary protection, and secure communicationsDesign and implement network security defenses such as firewalls, VPCs, and perimeter controlsUtilize observability tools for logging, monitoring, and threat detection in cloud environmentsLeverage AI agents to automate and streamline security and infrastructure deployment tasksDrive security-focused digital transformation using Infrastructure as Code (IaC) and orchestrate secure containerized workloads RequirementsAt least 3 years of hands-on experience in cloud engineering or a related fieldExperience architecting and implementing secure policies and services, preferably on Google Cloud Platform (GCP)Expertise in security threat analysis and mitigation, with hands-on experience using SIEM tools such as Google SecOps (Chronicle), WiZ, or similarProven ability to define, design, and implement security strategies and governance frameworksExperience enforcing regulatory controls and collaborating with SOC or SecOps teams to meet compliance requirementsAdvanced skills in Identity and Access Management (IAM), including resource hierarchy design, boundary protection, secure communications, and Workload Identity Federation (WIF)Proficiency in designing and implementing network security defenses, including Cloud Firewall, Cloud Armor, and VPC, as well as ensuring data protection and observability for threat managementExperience leveraging AI agents to automate, accelerate, and de-risk security and infrastructure deploymentsExpertise in setting up secure Landing Zones, Data and AI Foundations, and establishing secure communication perimeters for users, agents, and servicesSkilled in using Infrastructure as Code (e.g., Terraform) for compliance-driven deployment, orchestrating secure workloads with Google Kubernetes Engine (GKE), and securing CI/CD and DevSecOps pipelinesFluent English skills (written and spoken) at a B2+ level or higher We offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedIn