GCP Security

Cloudxtreme; Hyderabad, Bengaluru; Hybrid; INR 1,800,000 - 2,600,000; Full time

Job summary

Cloudxtreme is seeking a security-focused Cloud Engineer specializing in GCP security services and secure cloud architectures. The role requires hands-on container security, Kubernetes, Infra-as-Code, and CI/CD hardening, with familiarity in zero-trust principles and multi-cloud environments.

You will document reference architectures, identify gaps, and propose practical, secure solutions for microservices and distributed systems. Strong IAM, VPC, and cloud security controls are expected.

Qualifications

• Must have strong hands-on experience with cloud security architectures and patterns across GCP and multi-cloud environments.
• Experience securing containerized workloads and service meshes, with practical IaC security controls.
• Familiar with zero-trust concepts, policy enforcement, and secure-by-design principles.

Responsibilities

• Document and codify security reference architectures and reusable guardrails.
• Identify gaps in existing architectures and propose secure, practical solutions.
• Address security challenges in microservices and distributed systems, focusing on isolation and blast-radius reduction.
• Implement IaC security with Terraform or similar tools and embed security policies.
• Harden CI/CD pipelines, ensure artifact integrity, and enforce supply chain security.
• Secure container environments (GKE, Istio/Envoy service mesh) and enforce Kubernetes admission controls.

Skills

GCP security

Container security

Zero-trust

Kubernetes

Infra-as-Code security

CI/CD hardening

Multi-cloud

Job description

Role & responsibilities

Location- PAN INDIA

Key Skills :

• Expertise in GCP security services and secure cloud architectures
• Strong hands-on experience with container security, Kubernetes, Infra-as-Code, and CI/CD
• Familiarity with zero-trust principles and multi-cloud environments

Role Requirements in Detail:

• Document and codify security reference architectures, reusable guardrails, and secure-by-design patterns.
• Ability to spot gaps in existing architectures and propose practical, secure solutions.
• Experience with microservices/cellular architecture and distributed systems security challenges (isolation, blast radius reduction, service mesh security).
• Infra-as-Code security (Terraform, Deployment Manager, etc.) with embedded security policies.
• Familiarity with CI/CD hardening, artifact integrity, and supply chain security.
• Container security (GKE, Anthos, service mesh like Istio/Envoy).
• Kubernetes admission controls, policy enforcement (OPA/Gatekeeper, Kyverno).
• API security and zero-trust service-to-service authentication patterns.
• Multi-cloud literacy (GCP/AWS/Azure), especially as it supports secure pattern generalization.
• Develops secure, scalable, and highly usable solutions.
• Strong GCP experience (IAM, VPC Service Controls, Cloud Armor, SCC, CMEK, etc.).