Lead Security Cloud Engineer - GCP

EPAM Systems; Colombia; On-site; COP 12,000,000 - 24,000,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling and certifications

LinkedIn Learning access

Global career opportunities

Volunteer opportunities

Job summary

EPAM Systems, a leading global digital platform engineering company, is seeking a Lead Security Cloud Engineer - GCP in Colombia. You will design and run secure Google Cloud Platform services, guiding security strategies and compliant deployments across teams.

Responsibilities include implementing secure policies, threat analysis with SIEM tools, defining governance with CISOs, enforcing regulatory controls with SOC/SecOps, and enabling secure landing zones using Terraform, IAM, and GKE.

Qualifications

• 5+ years of experience implementing secure policies and services on Google Cloud Platform.
• Expertise in security threat analysis and mitigation using SIEM tools such as Google SecOps, WiZ, and similar tools.
• Background partnering with CISOs and Security Engineers on governance requirements.
• Experience enforcing regulatory controls with SOC or SecOps teams.
• Deep understanding of IAM, resource hierarchies, boundary protection, secure communications, and Workload Identity Federation.

Responsibilities

• Implement secure policies and services on Google Cloud Platform.
• Assess and reduce security threats using SIEM tools such as Google SecOps and Wiz.
• Define security strategy with the CISO and Security Engineers to satisfy governance requirements.
• Enforce regulatory controls and support compliance requirements with SOC or SecOps teams.
• Configure IAM, boundary protection, and secure communications through IAM and Workload Identity Federation.
• Deploy network security defenses, ensure data protection, and use observability tools for threat detection and management.
• Apply AI agents to automate security and infrastructure deployment tasks.
• Enable secure landing zones and data and AI foundations for perimeters.
• Drive security-focused digital transformation using Infrastructure as Code for compliant deployments.
• Operate secure containerized workloads via GKE and secure CI/CD/DevSecOps pipelines.
• Collaborate with stakeholders to align requirements with business objectives.

Skills

Cloud security

GCP

SIEM

IAM

Terraform

CI/CD security

Kubernetes security

Communication skills

English proficiency

Tools

Cloud Firewall

Cloud Armor

VPC

IAM

Security Command Center

Terraform

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a Lead Security Cloud Engineer - GCP to design and run secure Google Cloud Platform services that align security needs with business outcomes. You will deliver professional services and technical consulting, guiding secure cloud strategies, automation, and compliant deployments across teams.

Responsibilities

• Implement secure policies and services on Google Cloud Platform
• Assess and reduce security threats using SIEM tools such as Google SecOps and WiZ
• Define security strategy with the CISO and Security Engineers to satisfy governance requirements
• Enforce regulatory controls and support compliance requirements alongside SOC or SecOps teams
• Configure resource hierarchies, set boundary protection, and secure communications through Identity and Access Management (IAM) and Workload Identity Federation (WIF)
• Deploy network security defenses, ensure data protection, and use observability tools for threat detection and management
• Apply AI agents to automate, accelerate, and de-risk complex security and infrastructure deployment tasks
• Enable secure landing zones and data and AI foundations, establishing perimeters for user-to-agent, agent-to-agent, and agent-to-services communication
• Drive security-focused digital transformation using Infrastructure as Code for compliance-driven deployment of security foundations
• Operate secure containerized workloads via Google Kubernetes Engine and secure the software CI/CD and DevSecOps pipelines
• Collaborate with stakeholders to align technical requirements with business objectives

Requirements

• 5+ years of experience implementing secure policies and services, ideally on Google Cloud Platform
• Expertise in security threat analysis and mitigation using SIEM tools such as Google SecOps, WiZ, and similar tools
• Background supporting security strategy definition and partnering with CISOs and Security Engineers on governance requirements
• Experience enforcing regulatory controls and supporting compliance requirements with SOC or SecOps teams
• Deep understanding of Identity and Access Management, resource hierarchies, boundary protection, secure communications, and Workload Identity Federation best practices
• Hands-on proficiency implementing Cloud Firewall, Cloud Armor, and VPC, along with data protection and Security Command Center for threat detection
• Proven ability to leverage AI agents to automate and de-risk security and infrastructure deployment tasks
• Solid expertise in secure landing zones and data and AI foundations for user-to-agent, agent-to-agent, and agent-to-services communication perimeters
• Practical skills with Terraform for compliance-driven security deployments, Google Kubernetes Engine security best practices, and securing CI/CD and DevSecOps pipelines
• Proven track record in Professional Services and Technical Consulting with strong communication, collaboration, and negotiation skills
• English proficiency at B2 (Upper-Intermediate) level or higher

Nice to have

• Google Professional Cloud Security Engineer certification
• Google Professional Cloud Architect certification
• Google Professional Security Operations Engineer certification

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.