Senior Security Cloud Engineer - GCP

EPAM Systems; Colombia; On-site; COP 100,440,000 - 167,400,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling and certifications

Global career opportunities

Employee Resource Groups

Job summary

EPAM Systems in Colombia is seeking a Senior Security Cloud Engineer with deep Google Cloud Platform expertise to implement, operate, and support secure cloud services and strategies across client projects.

You will work with multi-national teams to enforce governance, IAM, network security, and secure CI/CD pipelines, while advancing secure landing zones and data foundations.

Qualifications

• 3+ years building secure cloud solutions on Google Cloud Platform.
• Experience with security threat analysis using SIEM tools (Google SecOps, Wiz).
• Ability to work with CISOs and security engineers on governance requirements.

Responsibilities

• Implement secure policies and services on Google Cloud Platform.
• Analyze threats using SIEM tools and support security governance.
• Configure IAM hierarchies, boundary protection, and federation.
• Enforce regulatory controls with SOC/SecOps collaboration.
• Operate secure containers on GKE and secure DevSecOps pipelines.
• Collaborate with stakeholders to align security with business goals.

Skills

Google Cloud Platform

SIEM tools

IAM and WIF

Terraform

GKE / Kubernetes security

DevSecOps / CI/CD security

English (B2+)

Tools

Cloud Firewall

Cloud Armor

Security Command Center

CI/CD tooling

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are seeking a Senior Security Cloud Engineer with deep expertise in Google Cloud Platform to implement, operate, and support secure cloud services and strategies, bridging complex technical security requirements with executive business goals through professional services and technical consulting engagement.

Responsibilities

• Implement secure policies and services on Google Cloud Platform
• Analyze and mitigate security threats using SIEM tools such as Google SecOps and WiZ
• Support security strategy definition in collaboration with the CISO and Security Engineers to meet governance requirements
• Enforce regulatory controls and support compliance requirements alongside SOC or SecOps teams
• Configure resource hierarchies, establish boundary protection, and secure communications through Identity and Access Management (IAM) and Workload Identity Federation (WIF)
• Implement network security defenses, ensure data protection, and utilize observability tools for threat detection and management
• Leverage AI agents to automate, expedite, and de-risk complex security and infrastructure deployment tasks
• Support secure landing zones and data and AI foundations, setting up perimeters for user-to-agent, agent-to-agent, and agent-to-services communication
• Support security-focused digital transformation using Infrastructure as Code for compliance-driven deployment of security foundations
• Operate secure containerized workloads via Google Kubernetes Engine and secure the software CI/CD and DevSecOps pipelines
• Collaborate and communicate with stakeholders to align technical requirements with business objectives

Requirements

• 3+ years of experience implementing secure policies and services, preferably on Google Cloud Platform
• Expertise in security threat analysis and mitigation using SIEM tools such as Google SecOps, WiZ, and similar tools
• Experience supporting security strategy definition and working with CISOs and Security Engineers on governance requirements
• Experience enforcing regulatory controls and supporting compliance requirements with SOC or SecOps teams
• Expertise in Identity and Access Management, resource hierarchies, boundary protection, secure communications, and Workload Identity Federation best practices
• Proficiency in implementing Cloud Firewall, Cloud Armor, and VPC, along with data protection and Security Command Center for threat detection
• Expertise in leveraging AI agents to automate and de-risk security and infrastructure deployment tasks
• Expertise in secure landing zones and data and AI foundations for user-to-agent, agent-to-agent, and agent-to-services communication perimeters
• Skills in Terraform for compliance-driven security deployments, Google Kubernetes Engine security best practices, and securing CI/CD and DevSecOps pipelines
• Proven track record in Professional Services and Technical Consulting with communication, collaboration, and negotiation skills
• English proficiency at B2 level or higher

Nice to have

• Google Professional Cloud Security Engineer certification
• Google Professional Cloud Architect certification
• Google Professional Security Operations Engineer certification

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.