Description

Design and implement security controls for Google Cloud Platform environments, integrating infrastructure as code, SIEM, and AI/ML governance into production systems.

This role is on-site.

Responsibilities

• Architect GCP security solutions using IAM, VPC Service Controls, Cloud Armor, KMS, and Secret Manager.
• Manage Elastic SIEM for log ingestion, detection engineering, and threat correlation.
• Implement Infrastructure as Code (IaC) with Terraform and secure Kubernetes/GKE environments via Workload Identity and Network Policies.
• Integrate security controls into CI/CD pipelines using Harness and manage non-human identity governance.
• Apply security governance to Vertex AI and LLM implementations.

Required Skills

• 8+ years of Cloud Security experience, with deep expertise in Google Cloud Platform (GCP).
• Hands-on proficiency with GCP IAM, VPC Service Controls, Cloud Armor, KMS, Secret Manager, DLP, and Security Command Center.
• Strong experience with Elastic SIEM (log ingestion, detection engineering, alert management).
• Production experience with Terraform for Infrastructure as Code.
• Experience securing Kubernetes/GKE environments (Workload Identity, Network Policies, Binary Authorization).
• Experience integrating security into CI/CD pipelines using Harness or similar tools.
• Knowledge of ICAM/Enterprise IAM and non-human identity management.

Preferred Skills

• DevSecOps experience.
• AWS or Azure security exposure.

Bachelor's degree required. 3-year tenure expectation.

Key Skills

Education

Bachelor's degree