The team is securing the next generation of generative AI and agentic applications with a deny-by-default security perimeter for Artificial Intelligence (AI). It automatically enforces dynamic ingress and egress guardrails on every interaction between agents, models, tools and data across the enterprise. Building on Google Cloud's identity and policy stack (e.g., Identity and Access Management (IAM) Unified Access Policies, Principal Access Boundaries, Identity-Aware Proxy, Agent Gateway and Virtual Private Cloud (VPC) Service Controls), we turn intent such as "this agent may read tickets but never delete records" into context-aware boundaries that are enforced at runtime.Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.
Responsibilities
- Design, build, and deploy data-plane and control-plane components enforcing deny-by-default AI policies. Own features from design through launch, and help shape your roadmap.
- Build low-latency services that evaluate identity, context, and policy at Google Cloud scale. Author design docs and weigh performance, reliability, and maintenance trade-offs with senior engineers.
- Partner with Cloud Load Balancing, Cloud Run, IAM, and Agent Platform to integrate your features. Help define API agreements and integration details, and flag cross-team blockers early.
- Find and fix component risks, from policy correctness to failure modes and abuse paths. Join on-call response, resolve production incidents, and ensure fixes land.
- Turn requirements into clear milestones, estimate reliably, and deliver on schedule. Steer features through launch, including dry-runs and safe enforcement. Write clean, tested, documented code. Conduct thorough code reviews, and mentor Level3 engineers and interns.
Minimum qualifications:
- Bachelor’s degree or equivalent practical experience.
- 2 years of experience with software development in C++, Java, Python, or Go programming languages.
- Experience building and developing large-scale infrastructure or distributed systems.
Preferred qualifications:
- Master's degree or PhD in Computer Science or a related technical field.
- Experience in building and managing services on Google Cloud Platform (GCP) or similar cloud environments (e.g., using Kubernetes, Cloud Run).
- Experience with high-availability load balancing and networking technologies.
- Deep knowledge of cloud security concepts, Identity and Access Management (IAM), and Zero Trust architectures
- Deep understanding of agentic workflows including Model Context Protocol (MCP) server.