GCP Cloud Security Architect : Platform & Enterprise Security

PwC India; Hyderabad, Gurugram District, Bengaluru; On-site; INR 3,500,000 - 5,200,000; Full time

Job summary

PwC India is seeking an experienced GCP Cloud Security Architect to lead enterprise-wide security posture reviews and design secure GCP landing zones. The role focuses on securing GKE workloads and implementing foundational controls across the platform.

You will work on RBAC, network policies, and workload identity, while integrating security into CI/CD and IaC pipelines for scalable enterprise security.

Qualifications

• 7–10+ years in cloud security architecture, 3+ years GCP-focused.
• Strong knowledge of GCP-native security tooling (SCC, Cloud Armor, VPC-SC, DLP).
• Experience securing Kubernetes/GKE at scale.

Responsibilities

• Conduct GCP security posture assessments (SCC) & remediation.
• Architect secure GCP landing zones.
• Harden GKE clusters (RBAC, network policies, workload identity).
• Implement Cloud Armor, VPC-SC, Cloud DLP.
• Embed security into CI/CD & IaC pipelines.
• Define security architecture standards/guardrails.
• Present risk/roadmap to leadership.

Skills

GCP Security Posture Review

Enterprise Architecture

SCC

VPC-SC

DLP

Cloud Armor

GKE/Kubernetes Security

Network Security

VPC

Firewalls

Terraform

IAM

Job description

GCP Cloud Security Architect Platform & Enterprise Security

Lead enterprise-wide GCP security posture reviews, architect secure GCP landing zones, and secure Kubernetes/GKE workloads holistic platform security.

Primary Skill Set

• GCP Security Posture Review & Enterprise Architecture (SCC, VPC-SC, DLP, Cloud Armor)
• GKE/Kubernetes Security
• Network Security (VPC, Firewalls) Enterprise scale

Secondary Skill Set

• Terraform (secure landing zone automation)
• IAM (supporting role-based access design)

Key Responsibilities

• Conduct GCP security posture assessments (SCC) & remediate
• Architect secure GCP landing zones
• Harden GKE clusters (RBAC, network policies, workload identity)
• Implement Cloud Armor, VPC-SC, Cloud DLP
• Embed security into CI/CD & IaC pipelines
• Define security architecture standards/guardrails
• Present risk/roadmap to leadership

Minimum Requirements

• 7–10+ years in cloud security architecture, 3+ years GCP-focused
• Strong knowledge of GCP-native security tooling (SCC, Cloud Armor, VPC-SC, DLP)
• Experience securing Kubernetes/GKE at scale

Preferred Requirements

• GCP Professional Cloud Security Engineer/Architect certification strongly preferred