Role Overview
We are looking for a Cloud Governance & Compliance Engineer to establish and maintain governance standards across AWS, Azure, and GCP environments. The role will focus on Terraform code reviews, Git workflow governance, compliance documentation, risk control evidence, and security automation to ensure secure, reliable, and compliant cloud operations.
Key Responsibilities
- Define and enforce cloud governance policies and standards across AWS, Azure, and GCP.
- Own and manage code review processes for Terraform and Infrastructure as Code (IaC), ensuring adherence to security and coding best practices.
- Establish and enforce Git branching, version control, and pull request standards.
- Maintain cloud governance documentation, process guidelines, control evidence, and audit records.
- Integrate governance and compliance checks into CI/CD pipelines.
- Monitor compliance risks, track control effectiveness, and support internal and external audits.
- Implement automated governance and security checks using policy-as-code and compliance tools.
Required Skills & Experience
- 5+ years of experience in cloud governance, cloud security, compliance, or DevSecOps.
- Strong hands-on experience with Terraform and Infrastructure as Code.
- Proficiency in Git workflows, pull requests, and code review practices.
- Working knowledge of AWS, Azure, and GCP governance and security controls.
- Experience integrating Terraform and Git workflows into CI/CD pipelines.
- Familiarity with security scanning, compliance automation, and risk management.
- Strong documentation, communication, and stakeholder management skills.
Good to Have
- Experience with policy-as-code tools such as Open Policy Agent (OPA), HashiCorp Sentinel, and AWS Config.
- Knowledge of DevSecOps practices and automated compliance frameworks.
- Relevant cloud security certifications such as AWS Security Specialty or Azure Security Engineer.