Lead Cloud Security Architect, GCP

Jobtailor; Deutschland; Remote; EUR 110.000 - 150.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a senior Cloud Security Architect to design and govern security for Google Cloud Platform workloads, building scalable controls and risk-based decisions. You will partner with engineering and operations to implement security services and ensure configurations align with strong security policies.

Ideal candidates bring 8+ years in security architecture or cloud infrastructure, deep GCP knowledge, and a track record of translating risk into actionable controls and training for

Qualifikationen

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Deep knowledge of Google Cloud Platform security services and best practices, with openness to other cloud platforms.
• Ability to evaluate risk and make sound recommendations.

Aufgaben

• Design security architecture for cloud workloads on Google Cloud Platform.
• Create security design documents and decision logs for critical cloud security decisions.
• Partner with engineering and operations teams to implement cloud security services and controls.
• Validate configurations against organizational security policies and cloud platform best practices.
• Make decisions on critical security controls and document trade-offs between security, cost, and speed.
• Create security guidelines, runbooks, and training for development and operations teams on cloud security.
• Review architecture designs and cloud infrastructure configurations for security risks.
• Conduct threat modeling for high-risk cloud workloads and recommend mitigations.
• Serve as the trusted security advisor to engineering, operations, and leadership teams on cloud security matters.
• Communicate security decisions and risks clearly to technical and non-technical audiences.

Kenntnisse

Cloud Security Architecture

Cloud Workload Security

Threat Modeling

Security Guidelines Creation

Configuration Validation

Security Decision Documentation

Cloud Security Best Practices

Security Risk Review

Cloud Infrastructure Configuration

Security Control Implementation

Ausbildung

Bachelor’s degree in CS/InfoSec or related field

Tools

Terraform

Google Cloud Platform

Security Monitoring Tools

Jobbeschreibung

• Design security architecture for cloud workloads on Google Cloud Platform
• Create security design documents and decision logs for critical cloud security decisions
• Partner with engineering and operations teams to implement cloud security services and controls
• Validate configurations against organizational security policies and cloud platform best practices
• Ensure alignment with cloud security best practices and applicable compliance requirements
• Make decisions on critical security controls and document trade-offs between security, cost, and speed
• Create security guidelines, runbooks, and training for development and operations teams on cloud security
• Review architecture designs and cloud infrastructure configurations for security risks
• Conduct threat modeling for high-risk cloud workloads and recommend mitigations
• Serve as the trusted security advisor to engineering, operations, and leadership teams on cloud security matters
• Communicate security decisions and risks clearly to technical and non-technical audiences
• Complete responsibilities outlined in annual performance reviews and/or goal setting
• Complete special projects and other assigned duties

Requirements

• 8+ years of professional security architecture or cloud infrastructure engineering experience
• Bachelor’s degree in computer science, Information Security, or related field
• Deep knowledge of Google Cloud Platform security services and best practices, with openness to other cloud platforms
• Ability to make security decisions and explain trade-offs to technical and non-technical audiences
• Experience with infrastructure-as-code tools (Terraform or similar) and cloud security practices
• Cloud security certification (Google Cloud Professional Cloud Security Engineer, CISSP, or equivalent)
• Ability to evaluate risk and make sound recommendations
• Ability to present recommendations to both technical and executive audiences
• Ability to break down security requirements into actionable steps
• Willingness to work across teams and balance competing priorities
• Accountability for security decisions and implementation
• Comfort staying current with new cloud services and security practices
• Must be able to perform duties with or without reasonable accommodation
• Must be able to provide a dedicated, secure work area
• Must be able to provide high-speed internet access / connectivity and office setup and maintenance

Core Competencies

Demonstrates expertise in designing security architecture for cloud workloads, particularly on Google Cloud Platform, while ensuring compliance with security best practices and organizational policies. Capable of effectively communicating security decisions and risks to both technical and non-technical stakeholders.

Highest-signal resume keywords

• Cloud Security Architecture
• Google Cloud Platform Security Services
• Infrastructure-as-Code Tools (Terraform)
• Cloud Security Certification (Google Cloud Professional Cloud Security Engineer, CISSP)
• Risk Evaluation and Mitigation

Hard Skills

• Security Architecture Design
• Cloud Workload Security
• Threat Modeling
• Security Guidelines Creation
• Configuration Validation
• Security Decision Documentation
• Cloud Security Best Practices
• Security Risk Review
• Cloud Infrastructure Configuration
• Security Control Implementation

Soft Skills

• Cross-Team Collaboration
• Clear Communication
• Accountability
• Decision-Making
• Adaptability

Certifications & Qualifications

• Google Cloud Professional Cloud Security Engineer
• CISSP

Industry Keywords

• Cloud Security
• Compliance Requirements
• Security Policies
• Risk Management
• Cloud Infrastructure Engineering

Tools & Technologies

• Google Cloud Platform
• Terraform
• Cloud Security Services
• Infrastructure Management Tools
• Security Monitoring Tools