Software Engineer III, Infrastructure, Google Cloud

About the job

Google Cloud's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google Cloud's needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. You will anticipate our customer needs and be empowered to act like an owner, take action and innovate. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

The team is securing the next generation of generative AI and agentic applications with a deny-by-default security perimeter for Artificial Intelligence (AI). It automatically enforces dynamic ingress and egress guardrails on every interaction between agents, models, tools and data across the enterprise. Building on Google Cloud's identity and policy stack (e.g., Identity and Access Management (IAM) Unified Access Policies, Principal Access Boundaries, Identity-Aware Proxy, Agent Gateway and Virtual Private Cloud (VPC) Service Controls), we turn intent such as "this agent may read tickets but never delete records" into context-aware boundaries that are enforced at runtime.Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Responsibilities

• Design, build, and deploy data-plane and control-plane components enforcing deny-by-default AI policies. Own features from design through launch, and help shape your roadmap.
• Build low-latency services that evaluate identity, context, and policy at Google Cloud scale. Author design docs and weigh performance, reliability, and maintenance trade-offs with senior engineers.
• Partner with Cloud Load Balancing, Cloud Run, IAM, and Agent Platform to integrate your features. Help define API agreements and integration details, and flag cross-team blockers early.
• Find and fix component risks, from policy correctness to failure modes and abuse paths. Join on-call response, resolve production incidents, and ensure fixes land.
• Turn requirements into clear milestones, estimate reliably, and deliver on schedule. Steer features through launch, including dry-runs and safe enforcement. Write clean, tested, documented code. Conduct thorough code reviews, and mentor Level3 engineers and interns.

Qualifications

Minimum qualifications:

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in C++, Java, Python, or Go programming languages.
• Experience building and developing large-scale infrastructure or distributed systems.

Preferred qualifications:

• Master's degree or PhD in Computer Science or a related technical field.
• Experience in building and managing services on Google Cloud Platform (GCP) or similar cloud environments (e.g., using Kubernetes, Cloud Run).
• Experience with high-availability load balancing and networking technologies.
• Deep knowledge of cloud security concepts, Identity and Access Management (IAM), and Zero Trust architectures
• Deep understanding of agentic workflows including Model Context Protocol (MCP) server.