Principal Cloud Infrastructure Engineer (GCP)

CVS Health • Woonsocket, RI

3d • $144,200 - $288,400

About The Position

CVS Health is seeking a GCP Principal Engineer to lead its Cloud Engineering team and own the enterprise Google Cloud Platform. This foundational platform role sets architectural and engineering direction, establishes standards, and ensures the platform is secure, scalable, compliant, and reliable. The position combines hands-on engineering with technical leadership: designing the platform, writing and reviewing code, mentoring engineers, and aligning stakeholders around a shared technical vision. The role also drives cloud transformation initiatives across cloud service providers, with a focus on GCP, and prioritizes Infrastructure as Code for repeatable, automated deployments.

The engineer owns the enterprise GCP platform and landing zone, including organization structure, resource hierarchy, networking, Shared VPC, organization policies, and project factory patterns. The role leads platform engineering practices, builds self-service capabilities, and supports product teams in moving quickly while following enterprise standards. It also drives automation, CI/CD, policy-as-code, security, networking, compliance, observability, FinOps, and the GCP platform roadmap.

The position requires 10 or more years in cloud and infrastructure engineering, including at least five years of hands-on GCP experience at enterprise scale. A bachelor’s degree in Computer Science, Engineering, or a related field is requested, or equivalent demonstrated experience. The listed base pay range is $144,200 to $288,400, with eligibility for a CVS Health bonus, commission, or short-term incentive program and an equity award target. This full-time role is eligible for benefits including medical, dental, vision, paid time off, retirement savings options, wellness programs, and other resources, subject to eligibility. The anticipated application window closes November 13, 2026.

Requirements

• 10 or more years of experience in cloud and infrastructure engineering.
• At least 5 years of deep, hands-on GCP experience at enterprise scale.
• Proven ownership of a production GCP organization, including resource hierarchy, billing, organization policy, IAM, and multi-project governance.
• Demonstrated technical leadership, such as leading a platform team or major enterprise cloud initiative, setting technical direction, and developing engineers.
• Deep GCP expertise across compute and containers, networking, data and messaging, security, IaC and automation, and observability.
• Experience with GKE (Autopilot and Standard), Cloud Run, Compute Engine, and managed instance groups.
• Experience with Shared VPC, VPC Service Controls, Private Service Connect, Cloud Armor, and Interconnect.
• Experience with BigQuery, Pub/Sub, Cloud Storage, Dataflow, and Cloud Composer.
• Experience with IAM, Workload Identity, Security Command Center, Binary Authorization, Secret Manager, and VPC Service Controls.
• Experience with Terraform, including modules, remote state, and OPA, as well as Cloud Build and Config Connector.
• Experience with Cloud Operations Suite, Datadog, SLO/SLI design, and PagerDuty integration.
• Python and Go programming skills are required; Bash proficiency is expected.
• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent demonstrated experience.

Nice To Haves

• Google Cloud Professional Cloud Architect certification (strongly preferred).
• Google Cloud Professional DevOps Engineer certification.
• HashiCorp Terraform Associate or Professional certification.
• Experience applying HIPAA, PCI-DSS, or FedRAMP controls on GCP in regulated industries.
• Familiarity with Anthos, GKE Enterprise, and multi-cloud connectivity patterns.
• Experience with Vertex AI and MLOps patterns on GCP.

Responsibilities

• Own the enterprise GCP platform end-to-end, including organization structure, resource hierarchy, billing, governance, and networking, while collaborating with teams to keep the platform stable and compliant.
• Define and maintain the GCP landing zone, including Shared VPC, organization policies, and project factory patterns.
• Review GCP engineering designs as a technical authority, evaluating scalability, security, and operational excellence before production.
• Build self-service platform capabilities for product engineering teams.
• Lead the GCP cloud engineering team by setting technical direction, conducting design reviews, unblocking engineers, and driving delivery of platform initiatives.
• Establish and enforce engineering standards for Infrastructure as Code patterns, naming, tagging, branching, and deployments.
• Mentor engineers and build the team’s cloud engineering capabilities.
• Partner with architecture, security, operations, and business stakeholders to turn enterprise requirements into platform capabilities.
• Drive Infrastructure as Code practices, including reusable modules, pipeline integration, state management, and policy guardrails.
• Build and maintain CI/CD pipelines using Cloud Build, GitHub Actions, and Artifact Registry for platform infrastructure and application teams.
• Write production-quality automation to extend platform functionality, integrate GCP APIs, and reduce operational toil.
• Implement policy-as-code with OPA, Config Connector, and GCP organization policies.
• Architect and engineer GCP networking, including Shared VPC, VPC Service Controls, Private Service Connect, NCC, Cloud NAT, Cloud Interconnect, and HA VPN.
• Own GCP security posture, including identity, authorization, secrets management, and SIEM/CSPM integration.
• Drive automated compliance with applicable regulatory frameworks, including HIPAA, PCI, and SOC 2.
• Integrate Cloud Operations Suite, Datadog, and SLO/SLI frameworks as platform capabilities across workloads.
• Own the GCP platform roadmap and evaluate new GCP services and capabilities for enterprise adoption.
• Incorporate FinOps practices, including committed use discounts, rightsizing, budget alerting, and cost allocation.
• Research and pilot emerging GCP capabilities, including Vertex AI, GKE Enterprise, and Duet AI for DevOps.
• Foster collaboration across teams and towers to advance cloud technology adoption.

Benefits

• Medical coverage
• Dental coverage
• Vision coverage
• Paid time off
• Retirement savings options
• Wellness programs
• Other resources supporting physical, emotional, and financial well-being, based on eligibility
• CVS Health bonus, commission, or short-term incentive program eligibility
• Equity award program target

What This Job Offers

• Job Type: Full-time
• Career Level: Principal