Cloud Governance Engineer

Position Overview

• Policy & Compliance Design: Create and maintain automated governance frameworks using tools like Azure Policy, AWS Config, or GCP Organization Policies.
• Infrastructure as Code (IaC): Build and manage reusable Terraform, ARM, or Bicep templates for compliant landing zones.
• Identity & Access Management (IAM): Configure Role-Based Access Control (RBAC), least-privilege permissions, and enterprise directory integration.
• Cloud Account Lifecycles: Provision, baseline, and monitor cloud accounts, subscriptions, or projects to ensure continuous compliance.
• Cost & Resource Optimization: Track cloud spend, enforce tagging strategies, and implement resource-cleanup guardrails.
• Monitoring & Auditing: Integrate cloud security posture management (CSPM) tools and monitoring dashboards to detect drift or policy violations.

Typical Requirements & Qualifications

• Experience: Generally 3 to 7+ years of experience in cloud infrastructure, DevOps, or systems engineering (with senior/lead roles requiring 5 7+ years).
• Cloud Platforms: Hands-on experience with AWS, Microsoft Azure, or Google Cloud Platform (often multi-cloud).
• Scripting & IaC: Proficiency in Terraform, Python, Bash, or PowerShell.
• Frameworks & Standards: Familiarity with enterprise compliance frameworks (such as SOC2, ISO 27001, HIPAA, or federal IT standards like FITARA).
• Certifications: Cloud-specific security or architecture certifications (e.g., AWS Certified Security / Solutions Architect, Azure Solutions Architect Expert, or GCP Professional Cloud Architect.