Senior Principal Cloud Infrastructure and Platform Engineer

Bridge Analytics is seeking a senior cloud infrastructure and platform engineering leader to own the architecture and operation of its Google Cloud-based Trusted Research Environment. The role leads infrastructure, site reliability engineering, and Zero Trust security to provide secure, audited access to biomedical data and scalable compute for researchers.

Responsibilities

• Technical Leadership: Architect technical specifications and hand work to contractor resources to implement the work at scale
• SDLC, CI/CD, & Delivery Backbone: Establish parity dev, test, and production environments with CI/CD pipelines (Google Cloud Build, GitHub Actions) on our Infrastructure as Code (Terraform, CDKTF, Python), deploying reliably across multi-tenant GCP projects for both internal data engineering and external researchers
• Site Reliability Engineering (SRE): Define SLOs/SLIs and build the observability, monitoring, alerting (Cloud Monitoring), incident management, and runbooks for live researcher workloads and retire single points of failure so the platform maintains high availability. Light on-call rotation supported by contractor resources
• Cloud Security & Zero Trust Perimeter Ownership: Own and harden the security perimeter alongside our IT and Compliance partners — VPC Service Controls (VPC-SC), Assured Workloads, Cloud Armor, KMS, Secret Manager, organization policy, and least-privilege IAM — along with Data Loss Prevention (DLP), the exfiltration posture (full and controlled exfiltration prevention, geo-blocking) and forensic audit logging that keep a regulated TRE and sensitive PII demonstrably safe
• Identity & Access Management (IAM): Automate the access and permissions lifecycle — group-based RBAC, Single Sign-On (SSO), and provisioning via Cloud Identity and OIDC federation

Skills

• 10+ years in Cloud Infrastructure, Platform Engineering, DevOps, or Site Reliability Engineering (SRE) roles, operating production cloud at scale
• Expert with Terraform in production (CDKTF and strong Python a major plus); fluent with CI/CD (GitHub Actions, Cloud Build), GitOps, Docker, and containers
• Proven ownership of a security perimeter at scale — identity and least-privilege (IAM, VPC Service Controls, organization policy, Cloud KMS), DLP/exfiltration control, vulnerability management, and audit logging
• Experience operating regulated or security-sensitive environments (HIPAA, HITRUST, GDPR, SOC 2, NIST, PII data governance, GxP, or equivalent)
• Track record of directing contractor or consultant resources
• Hands-on expertise in architecting cloud-native infrastructure systems with IAM, cloud networking (VPC, Load Balancing), Google Kubernetes Engine (GKE), Cloud Run, Cloud Composer (Apache Airflow) DAG orchestration, BigQuery, and Vertex AI Agentic Platform
• Cloud Composer/Apache Airflow DAG orchestration, Dataplex / Knowledge Catalog, and Cloud Batch/GKE for scientific compute
• Trusted Research Environments (TRE), Life Sciences / Biotech and Pharma data platforms, or HIPAA/GDPR/PII-regulated data platforms; Policy as Code (OPA/Rego); the GA4GH ecosystem; confidential computing
• Enthusiasm for integrating AI coding and operations tools (e.g., Claude Code) into daily engineering workflows to optimize efficiency
• VDI / desktop-streaming or browser-isolation platforms (Kasm, Google Cloud Workstations, Chrome Enterprise); IAP with OIDC federation to Cloud Identity

Benefits

• Hybrid work arrangement: South San Francisco, CA (Tu+Th).

Company Overview