Software Engineer III, Infrastructure, Cloud

About the Job

Google Cloud's software engineers develop next-generation technologies for billions of users. We seek engineers with fresh ideas from areas like information retrieval, distributed computing, large-scale system design, networking, data storage, security, AI, NLP, UI design, and mobile. As a software engineer, you will work on critical Google Cloud projects, with opportunities to grow and evolve within our fast-paced business. You will anticipate customer needs, act as an owner, innovate, and take initiative. We value versatility, leadership, and enthusiasm for tackling new problems across the full stack.

The team is securing the next generation of generative AI and agentic applications with a deny-by-default security perimeter. This system automatically enforces dynamic ingress and egress guardrails on interactions between agents, models, tools, and data across the enterprise. Leveraging Google Cloud's identity and policy stack (e.g., IAM, Unified Access Policies, Principal Access Boundaries, Identity-Aware Proxy, Agent Gateway, and VPC Service Controls), we translate intent into context-aware boundaries enforced at runtime.

Google Cloud empowers organizations to digitally transform by delivering enterprise-grade solutions using Google's cutting-edge technology. Customers in over 200 countries rely on Google Cloud for growth and to solve critical business problems.

Key Responsibilities

• Design, build, and deploy data-plane and control-plane components that enforce deny-by-default AI policies.
• Own features from design through launch and contribute to roadmap development.
• Build low-latency services to evaluate identity, context, and policy at Google Cloud scale.
• Author design documents and make trade-offs regarding performance, reliability, and maintenance in collaboration with senior engineers.
• Partner with Cloud Load Balancing, Cloud Run, IAM, and Agent Platform teams for feature integration.
• Define API agreements and integration details, and proactively identify cross-team blockers.
• Identify and mitigate component risks, including policy correctness, failure modes, and abuse paths.
• Participate in on-call rotations, resolve production incidents, and ensure timely fixes.
• Translate requirements into clear milestones, provide reliable estimates, and deliver on schedule.
• Guide features through launch, including dry-runs and safe enforcement.
• Write clean, tested, and documented code.
• Conduct thorough code reviews and mentor engineers and interns.

Requirements & Tech Stack

• C++, Java, Python, or Go
• Building and developing large-scale infrastructure or distributed systems
• Google Cloud Platform (GCP) or similar cloud environments
• Kubernetes, Cloud Run
• High-availability load balancing and networking technologies
• Cloud security concepts, Identity and Access Management (IAM), and Zero Trust architectures
• Agentic workflows including Model Context Protocol (MCP) server

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in C++, Java, Python, or Go programming languages.
• Experience building and developing large-scale infrastructure or distributed systems.
• Master's degree or PhD in Computer Science or a related technical field.
• Experience in building and managing services on Google Cloud Platform (GCP) or similar cloud environments (e.g., using Kubernetes, Cloud Run).
• Experience with high-availability load balancing and networking technologies.
• Deep knowledge of cloud security concepts, Identity and Access Management (IAM), and Zero Trust architectures.
• Deep understanding of agentic workflows including Model Context Protocol (MCP) server.