Cloud Security Architect

Cloud/Data Security Architect Phoenix, AZ Day 1 Onsite 5 days a week.

Description and Location Role: Engineer II Premium (Cloud Security Consultant)

Focus: Security assessment of Google Cloud Platform-based conversational AI, telephony, API, and backend integration architecture.

• Assess the end-to-end architecture from a data security and privacy standpoint.
• Review security controls for Google Cloud Platform Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies for enforcing encryption standards and data access standards.
• Implement database activity monitoring and blocking rules in Google Cloud Platform.
• Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
• Produce a findings report with risk ratings, gaps, and remediation recommendations.
• Review data flows across: Google Cloud Platform service projects, Virtual agents / conversational AI, Telephony platforms, API proxies, Datastore, BigQuery, Cloud Storage, On-prem / Amex systems of record.
• Identify risks related and implement controls related to: Blocking Customer data exposure, PII handling, Encryption in transit and at rest, Secrets and key management, Users and NHI authentication, Database activity, Logging, monitoring, and auditability, Data retention and deletion.

• Strong experience in cloud security architecture, preferably Google Cloud Platform.
• Hands-on knowledge of: Google Cloud Platform IAM, VPC / Shared VPC, Cloud Run / GKE, BigQuery, Cloud Storage, Datastore / Firestore, Cloud KMS / Secret Manager.
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.
• Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects.
• Understanding of logging, SIEM integration, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.

• Experience with conversational AI / virtual agent platforms.
• Knowledge of telephony/SIP integrations and contact center platforms.
• Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.
• Familiarity with AI data governance, model safety, and GenAI security risks.

For applications and inquiries, contact:View email address on us.fitly.work