Cloud Security Architect

Job Summary (Cloud Security Architect)


- Minimum 12 years of experience in cloud security, primarily within Google Cloud Platform (GCP) environments.
- Proficient in GCP security services: IAM, VPC Service Controls, Cloud Armor, KMS, Secret Manager, DLP, and Security Command Center (SCC).
- Skilled in implementing and maintaining VPC controls for secure cloud networking.
- Strong experience with Elastic SIEM: log ingestion, detection engineering, alert management, and threat correlation.
- Advanced Terraform skills: module development, infrastructure automation, and state management.
- Experience integrating security controls into CI/CD pipelines, preferably using Harness or similar platforms.
- In-depth knowledge of Kubernetes and GKE security: pod security, network policies, Workload Identity, Binary Authorization.
- Hands-on experience with identity and access management for non-human identities and workload access (ICAM/enterprise identity platforms).
- Familiarity with AI/ML security, including Vertex AI workload protection, LLM API governance, and data security for training sets.
- Location: Hybrid (New York City, NY).