O que a vaga pede
Job Description: GCP Security - Cloud Engineer
Rate: $28/hr
Client: Google
Brazil or Columbia
Job Summary
We are seeking a Security Cloud Engineer with over 6 years of experience to architect, implement, and maintain secure policies and services, primarily on Google Cloud Platform (GCP). The ideal candidate will combine technical expertise in cloud security, threat analysis, and infrastructure automation with strong consulting and project management skills to align complex technical requirements with executive business goals.
Key Responsibilities & Requirements
Experience: 6+ years of experience architecting and implementing secure policies and services, preferably on Google Cloud Platform (GCP).
Threat Analysis & SIEM: Expertise in security threat analysis and mitigation using SIEM tools such as Google SecOps (formerly Chronicle), Wiz, and similar security platforms.
Security Strategy & Governance: Experience defining security strategies and collaborating with the CISO and Security Engineers to design and implement robust security strategies and governance requirements.
Compliance & Controls: Proven ability to enforce regulatory controls and collaborate with SOC or SecOps teams to support strict compliance requirements.
IAM & Resource Hierarchy: Expert in Identity and Access Management (IAM), defining resource hierarchies, establishing boundary protection, securing communications, and implementing Workload Identity Federation (WIF) best practices.
Network Security & Observability: Proficient in designing and implementing network security defenses (e.g., Cloud Firewall, Cloud Armor, VPC), ensuring data protection, and leveraging observability tools (logging, monitoring, and Security Command Center) for threat detection and management.
AI Automation: Expertise in leveraging AI agents to automate, expedite, and de-risk complex security and infrastructure deployment tasks.
Secure Landing Zones & AI Foundations: Expertise in establishing secure Landing zones, Data, and AI Foundations, including setting up perimeters for:
User-to-Agent
Agent-to-Agent
Agent-to-Services communication
IaC & Container Security: Skilled in driving security-focused digital transformation using Infrastructure as Code (e.g., Terraform) for compliance-driven deployment of security foundations, orchestrating secure containerized workloads via Google Kubernetes Engine (GKE) Best Practices: Security, and securing software CI/CD and DevSecOps pipelines.
Consulting & Stakeholder Management: Proven track record in Professional Services and Technical Consulting, with demonstrated ability in project management, communication, collaboration, and negotiation skills to bridge complex technical requirements with executive business goals.
Desired Certifications
Having one of the following certifications is highly recommended:
Google Professional Cloud Security Engineer
Google Professional Cloud Architect
Google Professional Security Operations Engineer