GCP Security - Cloud Engineer

Mercado de Ti; Brasil; Remote; BRL 608.000 - 911.000; Vollzeit

Zusammenfassung

Mercado de Ti seeks a Security Cloud Engineer with 6+ years of experience to architect and maintain secure policies and services on Google Cloud Platform (GCP). The role emphasizes threat analysis, governance, IAM, and secure landing zones, with experience across Secure AI foundations and DevSecOps pipelines.

This is a contract role offering remote work from Brazil or Colombia, with international collaboration.

Qualifikationen

• 6+ years of experience architecting and implementing secure policies and services on cloud platforms.
• Experience with threat analysis and SIEM tools such as Google SecOps/Chronicle and Wiz.
• Ability to define security strategies and governance with CISO and security engineers.
• Proven ability to enforce regulatory controls and collaborate with SOC/SecOps teams.
• Expertise in IAM, resource hierarchies, and workload identity federation.

Aufgaben

• Architect secure landing zones and AI foundations across User-to-Agent, Agent-to-Agent, and Agent-to-Services communications.
• Drive IaC security with Terraform for compliant deployments of security foundations.
• Design and implement network security using Cloud Firewall, Cloud Armor, and VPC defenses.
• Lead security posture monitoring with Cloud Guard, logging, monitoring, and Security Command Center.

Kenntnisse

Cloud security

Threat analysis

IAM & access management

Network security

Terraform

GKE security

Security Command Center

SIEM tools

Workload Identity Federation

AI automation

Tools

GCP

Google SecOps/Chronicle

Wiz

Cloud Armor

Cloud Firewall

VPC

Security Command Center

Terraform

GKE security

Jobbeschreibung

**Role: GCP Security - Cloud Engineer****Type: Contract****Location: Brazil / Columbia – Remote****Job Summary**We are seeking a Security Cloud Engineer with over **6 years of experience** to architect, implement, and maintain secure policies and services, primarily on **Google Cloud Platform (GCP)**. The ideal candidate will combine technical expertise in cloud security, threat analysis, and infrastructure automation with strong consulting and project management skills to align complex technical requirements with executive business goals.**Key Responsibilities & Requirements*** **Experience:** 6+ years of experience architecting and implementing secure policies and services, preferably on Google Cloud Platform (GCP).* **Threat Analysis & SIEM:** Expertise in security threat analysis and mitigation using SIEM tools such as **Google SecOps (formerly Chronicle)**, **Wiz**, and similar security platforms.* **Security Strategy & Governance:** Experience defining security strategies and collaborating with the CISO and Security Engineers to design and implement robust security strategies and governance requirements.* **Compliance & Controls:** Proven ability to enforce regulatory controls and collaborate with SOC or SecOps teams to support strict compliance requirements.* **IAM & Resource Hierarchy:** Expert in **Identity and Access Management (IAM)**, defining resource hierarchies, establishing boundary protection, securing communications, and implementing **Workload Identity Federation (WIF)** best practices.* **Network Security & Observability:** Proficient in designing and implementing network security defenses (e.g., **Cloud Firewall**, **Cloud Armor**, **VPC**), ensuring data protection, and leveraging observability tools (**logging, monitoring, and Security Command Center**) for threat detection and management.* **AI Automation:** Expertise in leveraging **AI agents** to automate, expedite, and de-risk complex security and infrastructure deployment tasks.* **Secure Landing Zones & AI Foundations:** Expertise in establishing secure Landing zones, Data, and AI Foundations, including setting up perimeters for:* User-to-Agent* Agent-to-Agent* Agent-to-Services communication* **IaC & Container Security:** Skilled in driving security-focused digital transformation using Infrastructure as Code (e.g., **Terraform**) for compliance-driven deployment of security foundations, orchestrating secure containerized workloads via **Google Kubernetes Engine (GKE) Best Practices: Security**, and securing software CI/CD and DevSecOps pipelines.* **Consulting & Stakeholder Management:** Proven track record in Professional Services and Technical Consulting, with demonstrated ability in project management, communication, collaboration, and negotiation skills to bridge complex technical requirements with executive business goals.**Desired Certifications**Having one of the following certifications is highly recommended:* **Google Professional Cloud Security Engineer*** **Google Professional Cloud Architect*** **Google Professional Security Operations Engineer**.