GCP Security Architect - Hybrid

Role:

• Design and implement secure cloud architectures and strategies on GCP.
• Evaluate and recommend security tools, services and configurations to strengthen cloud security posture.
• Ensure compliance with security standards and frameworks such as ISO 27001, NIST, CIS, GDPR and others.
• Lead threat modeling, risk assessments, and security reviews for GCP infrastructure and applications.
• Define and enforce Identity and Access Management (IAM) policies, including roles, permissions and service accounts.
• Implement and maintain security monitoring, logging, and alerting tools (e.g., Cloud Logging, Cloud Monitoring, SCC).
• Collaborate with DevOps, engineering, and compliance teams to embed security into the CI/CD pipelines.

Skills:

• Extensive experience in cloud security architecture, with at least 3 years on Google Cloud Platform.
• Deep understanding of GCP services such as VPC, IAM, Cloud Armor, KMS, SCC, GKE and others.
• Strong knowledge of security protocols, authentication, authorisation, encryption and network security.
• Experience implementing Infrastructure as Code (IaC) with tools like Terraform or Deployment Manager.
• Familiarity with DevSecOps practices and integrating security into DevOps pipelines.
• Experience with security assessment tools and methodologies.
• GCP Professional Cloud Security Engineer certification (preferred).
• Strong communication and stakeholder engagement skills.
• Experience with multi-cloud environments (AWS, Azure) preferred.