Staff Software Engineer, Modern Governance and Hybrid Guardrails
Summary
Build and lead the Hybrid Guardrails team to enforce security and compliance policies across Google Cloud Platform, designing dynamic controls and zero-impact rollout pipelines for Alphabet’s cloud footprint.
As a part of the Hybrid Cloud Environment (HCE) team, your mission is to enable Alphabet’s safe-by-default use of Google Cloud Platform (GCP) by shifting non-functional requirements (Security, Privacy, Regulatory, and FinOps) into the platform layer.
In this role, you will lead a newly consolidated engineering team that merges two critical workstreams: The former Cloud AI Solutions team and The former Corp Run team.The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
US: $207000 - $300000 (USD) + 20% bonus target + equity + benefits
Learn more about benefits at Google.
- Set and communicate team priorities that support the broader organization's goals, aligning strategy, processes, and decision-making across teams.
- Establish clear expectations with individuals based on their level and role and aligned to the broader organization's goals, meeting regularly with individuals to discuss performance and development and provide feedback and coaching.
- Lead the technical design, evolution, and execution of dynamic security controls, conditional policy actuation via Cloud Tags, and staged, zero-impact roll out pipelines across Alphabet's cloud footprint.
- Serve as a technical anchor for the Hybrid Guardrails engineering team, reviewing complex designs, establishing rigorous code and security standards, and mentoring executive engineers and Technical Leads (TLs).
- Design intelligent components that dynamically evaluate workload intent, data sensitivity, and maturity stage to enforce appropriate security guardrails without introducing manual exception bottlenecks.
Minimum qualifications:
- Bachelor’s degree, or equivalent practical experience.
- 8 years of experience in software development.
- Experience in applications security, cryptography, network security, systems security or malware analysis.
- Experience with Engineering Tools and Infrastructure.
- Experience with Cloud.
Preferred qualifications:
- Master's degree or PhD in Computer Science or a related technical field.
- 3 years of experience working in a complex, matrixed organization.
- Experience designing sandboxes, execution runtimes, or governance APIs for autonomous AI agents and high-velocity developer platforms.
- Proven experience designing modular Terraform libraries, policy compilers, and automated deployment pipelines across multi-organization cloud environments.
- Deep expertise with Google Cloud Platform (GCP) governance primitives, including Organization Policies, Identity and Access Management (IAM) Allow/Deny policies, Hierarchical Firewalls, VPC Service Controls (VPC-SC), and Resource Manager/Cloud Tags.