Primary Responsibilities

• Design and implement secure architectures for GCP environments, aligned with regulatory and organizational standards.
• Build and maintain threat models for GCP services and workloads.
• Define and enforce preventive and detective controls to secure GCP services.
• Establish policy-as-code and implement security guardrails using tools such as Terraform and other IaC frameworks.
• Define requirements and best practices for secure usage of GCP services across the organization.
• Provide guidance on access control, privileged access management (PAM), identity and access management (IAM), and incident response processes.
• Ensure compliance with security standards such as NIST, CSA CCM, and other relevant frameworks.
• Collaborate with security teams, operations, application owners, and service providers to enhance overall cloud security posture.
• Create high-quality documentation, reports, and presentations for senior stakeholders.
• Support deployment and integration activities for PAM and other security tools in the GCP environment.

Required Qualifications

• 3+ years of experience in GCP security architecture and design.
• Deep understanding of GCP services and their associated security features.
• Hands-on experience with Terraform, IaC, and IaC security practices.
• Strong understanding of attack frameworks, threat modeling, and security controls.
• In-depth knowledge of access control, PAM tools, IAM, and incident management.
• Proven experience working with NIST, CSA CCM, and other security/compliance frameworks.
• Excellent communication skills and ability to work with cross-functional teams and stakeholders.

Posted By