Senior Cloud Security Architect — GCP Multi‑Tenant

Lumenalta; Mexico; On-site; MXN 900,000 - 1,300,000; Full time

Job summary

Lumenalta is seeking an experienced Security Architect to lead cloud security for a multi-tenant GCP platform. This senior, hands-on role focuses on designing and validating security posture, including VPC controls, CABs, IAM, and threat models.

You will present decisions to security panels and ensure regulatory compliance across the architecture. The ideal candidate has 7+ years in cloud security, with CISSP, OSCP, and Google Cloud Security Engineer credentials, and strong communication skills

Qualifications

• Minimum 7+ years in cybersecurity, with multi-tenant security design experience.
• Hands-on expertise in GCP security primitives and policy controls.
• Proven track record in threat modeling and security reviews.

Responsibilities

• Design and enforce cloud security controls on GCP across multi-tenant environments.
• Lead threat modeling sessions and architectural security reviews.
• Validate identity propagation across front-to-back delegation chains.
• Conduct tenant-boundary validation, API and gs:// URI testing.
• Design and implement DLP controls and data retention policies.
• Defend security decisions in formal review settings and governance panels.
• Collaborate with engineering and product to embed security requirements.

Skills

Cloud security architecture

GCP security primitives

Threat modeling

Penetration testing

Identity propagation

DLP controls design

Compliance awareness

Executive communication

Education

CISSP

OSCP

Google Professional Cloud Security Engineer

Tools

GCP

AWS Security Hub

Control Tower

SIEM

Job description

Lumenalta is seeking an experienced Security Architect to lead cloud security for a multi-tenant GCP platform. This senior, hands-on role focuses on designing and validating security posture, including VPC controls, CABs, IAM, and threat models.

You will present decisions to security panels and ensure regulatory compliance across the architecture. The ideal candidate has 7+ years in cloud security, with CISSP, OSCP, and Google Cloud Security Engineer credentials, and strong communication skills