DevOps / AI Ops Administrator

RESPONSIBILITIES :

Kforce has a client in Englewood, CO that is seeking a Principal Cloud Security Engineer.

Summary : We're looking for a Principal Cloud Security Engineer who brings deep experience, sharp instincts, and hands-on skills to help a large-scale enterprise mature its Google Cloud Platform presence. If you've transitioned from on-prem to cloud, know your way around Google Cloud Platform like the back of your hand, and are ready to lead security practices at scale, this role could be the next big step in your journey. This isn't a build-from-scratch infrastructure role-it's about navigating complex systems, guiding cloud security practices, and driving compliance and resilience across thousands of machines in a mature enterprise environment.

Duties :

• Own cloud security strategy and execution for Google Cloud Platform, focusing on compliance, vulnerability management, and scalable controls
• Apply your past on-prem experience to secure a hybrid environment while leaning fully into Google Cloud Platform for the future
• Handle vulnerability assessments and patching processes across tens of thousands of machines, prioritizing and executing within tight timelines
• Contribute hands-on with tools like Terraform and Ansible, with working knowledge of Python (not a developer role, but familiarity is key)
• Guide decisions around PCI, SOC compliance, and business continuity planning (BCPs)
• Present to senior leadership, explain security tradeoffs, and justify technical decisions with clarity and confidence
• Mentor peers and junior team members, representing the principal level with strategic insight and technical depth
• Participate in Google Cloud Platform migration projects-ideally having been involved in past cloud transition initiatives

REQUIREMENTS :

Why this role matters : Our client has built a strong model in AWS and is now extending that to Google Cloud Platform. The challenge? A gap in Google Cloud Platform expertise. They're actively seeking talent with real Google Cloud Platform experience to lead the charge in cloud security and compliance-particularly someone who understands both the technical and strategic layers.

What This Role Is Not : This isn't a Kubernetes-heavy or app-development position. You won't be building a public cloud architecture from scratch-but you will influence how security scales within it.

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical / dental / vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note : Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity / Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.