Google Cloud and Assured Workloads engineering

We build Google Cloud environments inside Assured Workloads and in the commercial regions, with service perimeters around the data.

Our engineers hold Google and HashiCorp certifications.

Talk to our team Multi-cloud architecture

Assured Workloads

Assured Workloads has control packages for FedRAMP Moderate and High, IL2, IL4, IL5, CJIS and ITAR.

Choosing a control package

A package bundles controls such as US-only data location or limits on who can give support, and together they support one framework’s baseline. We match the package to your program and build the workloads inside it.

Public-sector programs

Service perimeters

VPC Service Controls draws a perimeter around your Google Cloud resources; by default, Google Cloud services such as Cloud Storage and BigQuery cannot pass data across it. We design the perimeters and the exceptions your workloads need.

Reviewing and building your Google Cloud environment

Well-Architected review

We review each workload against the Google Cloud Well-Architected Framework, whose security pillar also covers privacy and compliance.

Security engineering

We configure VPC Service Controls, Cloud Armor policies, CMEK and Security Command Center alert routing, mapped to CIS Benchmarks, NIST SP 800-53 and your agency’s baseline.

Infrastructure as code: Organization policies, perimeters and keys.
Control runbook: Each service perimeter, key and Cloud Armor policy, with its Security Command Center alerts.

Talk to us about your Google Cloud environment

Talk to our team Multi-cloud architecture