Lead Security Cloud Engineer - GCP

EPAM Systems; México; A distancia; MXN 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Paid time off and sick leave

Upskilling & certification courses

LinkedIn Learning access

Descripción de la vacante

EPAM Systems, Inc. is seeking a Lead Security Cloud Engineer to design and run secure Google Cloud Platform services aligned with business outcomes. You will guide secure cloud strategies, automation, and compliant deployments across teams to maximize security posture.

You will work with CISOs and Security Engineers to enforce governance, implement secure landing zones, and secure CI/CD and DevSecOps pipelines across global teams.

Formación

• 5+ years of experience implementing secure policies and services on Google Cloud Platform.
• Experience in security threat analysis and mitigation using SIEM tools (Google SecOps, WiZ, etc.).
• Experience collaborating with CISOs and Security Engineers on governance requirements.
• Hands-on proficiency with Terraform for compliance-driven security deployments.
• Strong IAM, boundary protection, and Workload Identity Federation best practices.

Responsabilidades

• Design secure policies and services on Google Cloud Platform.
• Assess and reduce threats with SIEM tools and observability platforms.
• Define security strategy with CISOs to meet governance requirements.
• Configure IAM, boundary protection, and WIF for secure communications.
• Deploy network security defenses (Cloud Armor, VPC) and data protection measures.
• Land secure landing zones and AI/data foundations for secure perimeters.
• Automate security deployments via Infrastructure as Code and DevSecOps pipelines.
• Collaborate with stakeholders to align security with business objectives.

Conocimientos

GCP security

SIEM tools

Terraform

GKE security

IAM & WIF

CI/CD security

Threat analysis

Professional services

English proficiency

Educación

Certifications: Google Professional Cloud Security Engineer

Certifications: Google Professional Cloud Architect

Certifications: Google Professional Security Operations Engineer

Herramientas

Google SecOps

WiZ

Cloud Firewall

Descripción del empleo

We are looking for a Lead Security Cloud Engineer - GCP to design and run secure Google Cloud Platform services that align security needs with business outcomes. You will deliver professional services and technical consulting, guiding secure cloud strategies, automation, and compliant deployments across teams.ResponsibilitiesImplement secure policies and services on Google Cloud PlatformAssess and reduce security threats using SIEM tools such as Google SecOps and WiZDefine security strategy with the CISO and Security Engineers to satisfy governance requirementsEnforce regulatory controls and support compliance requirements alongside SOC or SecOps teamsConfigure resource hierarchies, set boundary protection, and secure communications through Identity and Access Management (IAM) and Workload Identity Federation (WIF)Deploy network security defenses, ensure data protection, and use observability tools for threat detection and managementApply AI agents to automate, accelerate, and de-risk complex security and infrastructure deployment tasksEnable secure landing zones and data and AI foundations, establishing perimeters for user-to-agent, agent-to-agent, and agent-to-services communicationDrive security-focused digital transformation using Infrastructure as Code for compliance-driven deployment of security foundationsOperate secure containerized workloads via Google Kubernetes Engine and secure the software CI/CD and DevSecOps pipelinesCollaborate with stakeholders to align technical requirements with business objectivesRequirements5+ years of experience implementing secure policies and services, ideally on Google Cloud PlatformExpertise in security threat analysis and mitigation using SIEM tools such as Google SecOps, WiZ, and similar toolsBackground supporting security strategy definition and partnering with CISOs and Security Engineers on governance requirementsExperience enforcing regulatory controls and supporting compliance requirements with SOC or SecOps teamsDeep understanding of Identity and Access Management, resource hierarchies, boundary protection, secure communications, and Workload Identity Federation best practicesHands-on proficiency implementing Cloud Firewall, Cloud Armor, and VPC, along with data protection and Security Command Center for threat detectionProven ability to leverage AI agents to automate and de-risk security and infrastructure deployment tasksSolid expertise in secure landing zones and data and AI foundations for user-to-agent, agent-to-agent, and agent-to-services communication perimetersPractical skills with Terraform for compliance-driven security deployments, Google Kubernetes Engine security best practices, and securing CI/CD and DevSecOps pipelinesProven track record in Professional Services and Technical Consulting with strong communication, collaboration, and negotiation skillsEnglish proficiency at B2 (Upper-Intermediate) level or higherNice to haveGoogle Professional Cloud Security Engineer certificationGoogle Professional Cloud Architect certificationGoogle Professional Security Operations Engineer certificationWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.