[Remote] GCP Cloud Analyst/Developer
Note: The job is a remote job and is open to candidates in USA. PeakIT is looking for a Senior GCP Cloud Analyst/Developer to evaluate GCP services and implement security controls. This role involves developing Policy as Code to ensure secure cloud adoption while collaborating with various teams to manage the service-enablement lifecycle.ResponsibilitiesEvaluate GCP cloud services to identify security control requirements and document them in standard service enablement workbooksWork independently in a dedicated service analysis/development team to deliver secure GCP services to users as quickly as possiblePresent service enablement workbooks to the Cloud Standards Board (CSB) for reviewAddress expert panel inquiries to secure service approval, information requests, or risk escalationsCollaborate with threat modelers to identify risks for specific GCP servicesPresent findings to the Threat Model Review (TMR) board and integrate identified mitigations into the final service control setWrite/develop code for automated security controls to secure GCP servicesCode control, response and remediation scripts using Python and TerraformBuild Infrastructure as Code (IaC) modules to deploy approved controls across GCP commercial and government landing zonesManage all control logic, configuration files, and documentation within Git repositories, following standard branching, pull and merge request workflowsCoordinate with the CSB core team and the PaC team to align automated enforcement with organizational policy and validation standardsServe as a Subject Matter Expert (SME) for internal teams regarding GCP architecture and service capabilitiesPerform ad hoc technical research to resolve complex queries about emerging cloud featuresSkillsExpertise in Python, JSON, and Terraform for cloud security control automationKnowledge of various automated control types: Preventative, Proactive, Detective, Reactive, etc., and GCP Service Control PoliciesExperience with Git repository management and CI/CD (Continuous Integration/Continuous Deployment) conceptsStrong understanding of GCP Cloud Architecture and core service security (e.g., IAM, VPC, KMS)Experience presenting and defending technical analysis to expert panels or formal committeesGCP certifications (e.g., Associate Cloud Engineer, Professional Cloud Architect, Professional Cloud Developer, Professional Cloud Security Engineer, Professional Machine Learning Engineer)Experience developing custom GCP service security controlsExperience in Governance, Risk, and Compliance (GRC) or Policy-as-Code frameworksCompany OverviewWe are a US-owned IT solutions provider focused on delivering cutting-edge services to SMBs and large enterprises. It was founded in 2023, and is headquartered in San Jose, CA, US, with a workforce of 2-10 employees. Its website is https://www.peakit.tech/.