Principal Cloud Engineer
GXO Logistics19 days ago
Remote, United StatesStaff+
Responsibilities
- Build and scale GXO’s Google Cloud Platform foundation, including organization hierarchy, landing zones, Shared VPC, IAM, Workload Identity Federation, Secret Manager, Cloud KMS/CMEK, Identity-Aware Proxy, and Cloud Logging and Monitoring.
- Develop reusable Terraform modules, project factory patterns, secure-by-default configurations, standardized deployment patterns, GitOps workflows, CI/CD pipelines, policy guardrails, and platform automation.
- Engineer and operate production-grade Google Kubernetes Engine platforms, including cluster architecture, networking, ingress and egress, autoscaling, observability, and operational runbooks.
- Engineer enterprise networking capabilities including Shared VPC, Private Service Connect, VPC Service Controls, Cloud NAT, firewall policies, segmentation, Cloud Interconnect, and High Availability VPN.
- Implement zero-trust cloud security, least-privilege access, Binary Authorization, encryption, secrets management, audit logging, data protection controls, compliance automation, monitoring, alerting, tracing, and reliability practices.
- Develop and maintain CI/CD pipelines using Cloud Build, GitHub Actions, Artifact Registry, and related cloud-native tooling.
- Build self-service cloud capabilities for product, data, and AI engineering teams while maintaining governance, cost attribution, budgeting, rightsizing, committed-use planning, tagging standards, and cloud cost optimization.
- Build the Google Cloud foundation for GXO’s Enterprise AI Platform, including GKE-based runtimes, AI gateways, model services, agent runtimes, MCP servers, Agent Registry, and governed Snowflake integrations.
- Write Terraform, review pull requests, troubleshoot complex cloud issues, mentor engineers, document standards and designs, and raise engineering standards across the organization.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical field, or equivalent work experience.
- Google Cloud Professional Cloud Architect certification.
- 10–15+ years of experience in cloud engineering, platform engineering, infrastructure engineering, or distributed systems.
- 5–7+ years of hands-on experience designing, building, and operating enterprise-scale Google Cloud environments.
- Demonstrated experience building and scaling enterprise cloud platforms rather than solely operating existing environments.
- Deep expertise in Google Cloud resource hierarchy, organization policies, IAM, Workload Identity Federation, networking, Shared VPC, Cloud KMS/CMEK, Identity-Aware Proxy, logging, monitoring, and secure cloud operations.
- Extensive hands-on experience with Google Kubernetes Engine, Kubernetes networking, autoscaling, Cloud Run, ingress and egress, and production operations.
- Strong experience with Terraform, GitOps, CI/CD pipelines, Artifact Registry, and policy-as-code.
- Proven expertise implementing zero-trust cloud security, least-privilege access, Binary Authorization, encryption, secrets management, audit logging, and secure operational controls.
- Experience implementing enterprise observability, reliability engineering, FinOps practices, reusable platform engineering capabilities, and self-service cloud infrastructure.
- Experience supporting enterprise AI, analytics, machine learning, or large language model platforms on Google Cloud.
- Strong written and verbal communication skills, including documenting engineering standards, technical designs, and operational runbooks.
- Demonstrated ability to mentor engineers and collaborate with architects, security teams, infrastructure teams, and technology partners.
- Ability to operate effectively with minimal supervision in a fast-paced, global enterprise environment.
- Preferred qualifications include Google Cloud Professional Security Engineer, Professional DevOps Engineer, and Professional Machine Learning Engineer certifications; CKA or CKAD; HashiCorp Terraform Associate certification; and experience with Vertex AI, Gemini Enterprise Agent Platform, LiteLLM, MCP, AI gateways, agent runtimes, Snowflake integrations, secure multi-tenant cloud platforms, and large-scale FinOps.
Benefits
- Full health insurance, including medical, dental, and vision.
- 401(k), life insurance, disability insurance, and additional benefits.
- Global enterprise environment with opportunities to mentor engineers and collaborate across architecture, security, infrastructure, data, and AI teams.
Tech Stack
Categories
About GXO Logistics
GXO Logistics provides contract logistics services, designing and operating warehouses and fulfillment centers with advanced automation, robotics, and data-driven processes for retailers, e-commerce platforms, consumer goods companies, and manufacturers. Its offerings include e-commerce fulfillment, reverse logistics, and supply chain management. The company was formed in 2021 as a spin-off from XPO Logistics, is headquartered in Greenwich, Connecticut, and is publicly traded on the NYSE.