Sr Cloud Governance Engineer

About the role

This senior governance position sits on a small, globally distributed team. You will define and enforce standards across a multi‑cloud estate, translate technical risk for finance, security, product and executive audiences, and act as the go‑to expert on cloud exposure.

Key responsibilities

• Own the cloud governance roadmap and decide standardization order across GCP, AWS and Azure.
• Author and maintain policies using GCP Organization Policy, AWS SCPs/Config and Azure Policy.
• Manage the exception and waiver process, including judgment calls and compensating controls.
• Drive IaC consolidation, module standards and policy‑as‑code in CI pipelines.
• Partner with Security to set IAM and network security standards and lead access reviews.
• Define governance metrics and build dashboards for posture, policy violations, drift and remediation.
• Own cost governance through labeling, spend attribution, anomaly detection and waste accountability.
• Automate governance tasks with scripting, AI tooling and automated evidence gathering.

Required profile

• 7+ years working in public cloud environments, with 4+ years hands‑on GCP.
• Track record of owning or maturing a cloud governance function, including written standards and enforced controls.
• Proven ability to present technical risk to senior non‑technical stakeholders and negotiate with engineering teams.

Required skills

• GCP Organization Policy, AWS Service Control Policies, AWS Config, Azure Policy.
• Advanced Terraform (module design, policy‑as‑code) and CI integration (OPA, Conftest, Sentinel).
• Python for automation, enforcement and reporting.
• Strong knowledge of cloud IAM, network security, encryption, key and secret management.
• Experience with cloud cost tooling (GCP billing exports, BigQuery, AWS Cost Explorer).