Cloud Governance Engineer | India

Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide.

Living our values everyday results in our team-first culture and enables us to innovate, grow, and thrive while enjoying the journey together. We celebrate diversity and foster an inclusive environment, empowering our employees to be their authentic selves.

This is a governance role, not a build-and-operate role. You will spend your time defining the rules our cloud estate runs by, making those rules enforceable in code, and proving they are working.

You will write standards that other engineering teams have to follow, and you will explain to Finance, Security, and Product stakeholders why a given risk matters and what it will cost to fix or ignore.

If what you want is to build and run infrastructure, this is not the right seat. If you want to own how a multi-cloud estate is governed, it is.

You will be joining a small, globally distributed team. Your manager and several of your key stakeholders are based in the United States, so you will need regular overlap with them and the ability to keep moving between those conversations. Senior members of the team are available to mentor you on the governance side, but you should be comfortable owning your work once the direction is set.

About our estate: roughly 70% Google Cloud, with AWS and Azure in scope as secondary platforms. GCP is where the majority of the work sits, so hands-on GCP experience is a hard requirement rather than a preference.

Key Responsibilities

Define, document, and maintain cloud governance policies and standards across GCP, AWS, and Azure, and turn them into enforceable technical controls using GCP Organization Policy, AWS SCPs and Config, and Azure PolicyOwn the exception and waiver process end to end: intake, risk assessment, time-bound approval, expiry, and follow-upPartner with Security to enforce Identity and Access Management and network security standards across the organization, and review access models for least privilegeBuild and maintain dashboards that track governance metrics: security posture, key and credential rotation, policy violations, configuration drift, and time to remediationOwn resource labeling and tagging standards and enforce them, so that cost, ownership, and environment can be attributed reliablyDrive cost governance: spend visibility and showback, anomaly detection, commitment and discount coverage reviews, and surfacing waste to the teams that own itCollaborate with IT, Finance, Security, DevOps, Cloud Architects, and Product Engineering across regions to keep governance controls consistent, and translate technical risk into language those stakeholders can act onWork with stakeholders to define service level objectives, key performance indicators, and metrics for operational efficiencySupport the review of new third-party cloud services before they enter the estate

Requirements

4+ years working in public cloud environments, including at least 2 years hands-on with GCPHands-on experience implementing preventative guardrails in at least one hyperscaler (GCP Organization Policy, AWS SCPs or Config, Azure Policy). You should be able to walk us through a policy you rolled out, what it broke, and how you handled the falloutExperience authoring a cloud policy or standard that other teams were required to follow, not only implementing one written elsewhereExperience running or contributing to an exception or waiver process for cloud controlsWorking knowledge of cloud IAM, network security, encryption, and key and secret managementInfrastructure-as-Code with Terraform, and comfort extending it to policy-as-codePython for automation, enforcement, and reportingDemonstrated ability to explain a technical risk to a non-technical audience and drive a decision. This is a core part of the job and we will test it during the interview processProfessional written and spoken English, and the ability to work with regular overlap with colleagues based in the United States

Preferred Qualifications

Google Cloud Professional Cloud Security Engineer or Professional Cloud Architect certificationPolicy-as-code tooling: OPA, Conftest, SentinelCloud cost tooling: GCP billing exports and BigQuery, AWS Cost Explorer, or a third-party platform such as Cloudability or ApptioFamiliarity with the control frameworks our platform is audited against (SOC 2, HIPAA, GDPR). You will not own audits in this role, but context helps you prioritizeKubernetes governance and policy enforcementOkta integration, Microsoft Active Directory Federation ServicesBachelor's degree in Computer Science, Engineering, or another relevant technical fieldResult oriented, self-starter

This role is hybrid and requires 3 days a week in office.

Five9 embraces diversity and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more .