Description

Skills: GCP, Python, Terraform, Security

We are seeking a GCP Security Engineer to embed security and compliance guardrails into the GCP rollout so onboarding is secure by default and audit-ready. This role will partner closely with cloud, security, and delivery teams to translate control requirements into practical technical standards and enforce them through scalable cloud guardrails. Organization policies and centralized controls are a core part of this approach in Google Cloud.cloud.google+1

Role Summary

The ideal candidate will define and implement security guardrails across Google Cloud using Terraform, Python, and GCP-native controls. The focus is on turning security requirements into implementable standards, including policy constraints, IAM hardening, logging requirements, and evidence retention expectations. Google Cloud Organization Policy is designed to provide centralized, programmatic control over cloud resources, which fits this guardrail-driven model.cloud.google

Key Responsibilities

•             Translate security and compliance control requirements into technical guardrails, including Org Policies, baseline configurations, and enforcement patterns.

•             Define encryption and key management patterns, as well as secure secrets-handling expectations across the GCP environment.

•             Set logging, monitoring, and evidence-retention requirements to support audit readiness and operational visibility.

•             Drive exception handling workflows, risk-acceptance inputs, and remediation tracking for policy gaps and control deviations.

•             Partner with engineering and platform teams to ensure security requirements are adopted early in the onboarding lifecycle.

•             Automate guardrail implementation and validation using Python and Terraform where applicable.

•             Support control evidence collection and respond to audit requests efficiently and consistently.

Required Skills

•             5+ years of experience in cloud security, platform security, or security engineering.

•             Strong understanding of GCP security fundamentals, including organization policies, IAM hardening, and logging requirements.

•             Experience mapping security controls to technical implementations and evidence artifacts.

•             Hands-on experience with Terraform and Python in cloud delivery or automation contexts.

•             Practical delivery mindset with the ability to create standards that are implementable, repeatable, and scalable.

•             Strong communication and collaboration skills to work across security, engineering, and compliance stakeholders

Key Skills

Education

Any Graduate