Security Specialist (GCP)

GFT TECHNOLOGIES SE; Bogotá; Presencial; COP 120.000.000 - 190.000.000; Jornada completa

Descripción de la vacante

GFT TECHNOLOGIES SE in Bogotá is seeking a Security Specialist (GCP) to design, implement, and validate secure cloud foundations for a large modernization program. You will ensure compliance with FedRAMP High and IL4, while coordinating with Cloud Architects and DevOps during cutover and handover activities.

The role emphasizes translating regulatory requirements into technical configurations, managing security services in GCP, and maintaining strong cyber security practices in highly regulated

Formación

• Experience implementing FedRAMP High and/or IL4 controls.
• Experience with GCP Landing Zones.
• Strong knowledge of Assured Workloads and VPC Service Controls.
• Experience with CMEK and SCC.
• Ability to translate compliance requirements into technical security configurations.
• Experience validating cloud infrastructure against security and regulatory frameworks.
• Experience in highly regulated cloud environments.

Responsabilidades

• Implement and support FedRAMP High and IL4 compliance controls across the GCP Landing Zone design and implementation.
• Translate compliance and security requirements into technical security configurations.
• Configure and manage security services including Assured Workloads, VPC Service Controls, CMEK, and SCC.
• Guide Cloud Architects during Landing Zone cutover and security enablement processes.
• Provide documentation and compliance guidance for handover activities.
• Validate cloud infrastructure against FedRAMP High and IL4 requirements.
• Review infrastructure delivered by Cloud Engineering and DevOps before production.
• Assess pre-cutover environments for compliance before data introduction.
• Collaborate with architecture, engineering, DevOps and compliance teams to maintain security.

Conocimientos

FedRAMP High

IL4

GCP

Landing Zones

Assured Workloads

VPC Service Controls

CMEK

Security Command Center

Vulnerability management

Compliance frameworks

Herramientas

GCP

SCC

Descripción del empleo

Security Specialist (GCP)

Working Location:

What We Are Looking For

We are seeking a Cloud Security Engineerwith strong expertise inGoogle Cloud Platform (GCP), cybersecurity, vulnerability management, and compliance frameworks such as FedRAMP High and IL4. This role will support a large-scale modernization program by ensuring that secure cloud foundations are properly designed, implemented, validated, and transitioned into production environments while maintaining strict regulatory and security requirements.

Responsibilities

• Implement and support FedRAMP High and IL4 compliance controls throughout the Google Cloud Platform Landing Zone design and implementation phases
• Translate compliance and security requirements defined by Cloud Architects into technical security control configurations
• Configure and manage security services including Assured Workloads, VPC Service Controls, Customer-Managed Encryption Keys (CMEK), and Security Command Center (SCC)
• Guide Cloud Architects during Landing Zone cutover activities and security control enablement processes
• Provide technical documentation and compliance-related guidance to support successful handover activities
• Validate cloud infrastructure implementations against FedRAMP High and IL4 security and compliance requirements
• Review infrastructure delivered by Cloud Engineering and DevOps teams prior to production approval and sign-off
• Assess infrastructure within pre-cutover environments to ensure compliance before sensitive customer data is introduced
• Collaborate with architecture, engineering, DevOps, and compliance teams to maintain security and regulatory alignment
• Support vulnerability management activities and continuously improve cloud security practices

Requirements and Qualifications

• Experience implementing FedRAMP High and/or IL4 compliance controls
• Experience working with Google Cloud Platform (GCP) Landing Zones
• Strong knowledge of Assured Workloads
• Experience implementing and managing VPC Service Controls
• Experience with Customer-Managed Encryption Keys (CMEK)
• Knowledge and hands‑on experience with Security Command Center (SCC)
• Experience validating cloud infrastructure against security and regulatory compliance frameworks
• Ability to translate compliance requirements into technical security configurations
• Strong understanding of cloud security principles and cybersecurity best practices
• Experience with vulnerability management and security assessments
• Experience working in highly regulated cloud environments

Nice to Have

• Experience supporting security control enablement during Landing Zone cutover and transition activities
• Experience working closely with Cloud Architects, Cloud Engineers, and DevOps teams
• Experience supporting environments handling Controlled Unclassified Information (CUI)
• Knowledge of cloud governance, security operations, and risk management practices
• Experience participating in large‑scale cloud transformation or modernization programs
• Familiarity with multi-location delivery models and distributed teams

In compliance with our personal data protection policies, we inform you that the information you provide will be processed in accordance with the Privacy Notice available on our website, in the section: Privacy Notice for the Processing of Personal Data – Candidate