Senior GCP Security Engineer — Zero-Trust Lead (Manila)

Axos Clearing LLC; Manila; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Axos is seeking a Senior GCP Security Engineer to protect and advance the security of our Google Cloud Platform environments. You will serve as the GCP security authority—leading security architecture decisions, implementing controls, and ensuring our cloud workloads meet the highest standards.

You will design and manage IAM strategies, implement VPC security controls, drive data security and zero-trust access, and integrate security tooling into CI/CD pipelines with Infrastructure as Code

Qualifications

• 6+ years in information security with 3+ years in GCP security
• Expert-level proficiency with GCP security services: SCC, IAM, VPC Service Controls, Cloud Armor, KMS, DLP, Chronicle
• Hands-on experience with Terraform for GCP infrastructure security automation
• Strong command of Python for security tooling and automation
• Knowledge of financial services compliance requirements
• Deep understanding of cloud-native threat vectors and MITRE ATT&CK for Cloud

Responsibilities

• Architect and implement end-to-end GCP security controls across projects, folders, and organization-level policies
• Design and manage IAM strategy including workforce identity federation and service account governance
• Implement and manage VPC security controls and firewall policies
• Lead data security strategy and zero-trust access controls for internal apps on GCP
• Integrate security tooling into GCP CI/CD pipelines and IaC (Terraform)
• Conduct threat modeling and security assessments for GCP workloads
• Support audit and regulatory reviews and monitor GCP security posture

Skills

GCP security

IAM strategy

Terraform for GCP

Python for security tooling

Cloud security architecture

Education

Bachelor's degree in Computer Science or related

Tools

Terraform

Cloud Build

Artifact Registry

KMS

Chronicle

Job description

Axos is seeking a Senior GCP Security Engineer to protect and advance the security of our Google Cloud Platform environments. You will serve as the GCP security authority—leading security architecture decisions, implementing controls, and ensuring our cloud workloads meet the highest standards.

You will design and manage IAM strategies, implement VPC security controls, drive data security and zero-trust access, and integrate security tooling into CI/CD pipelines with Infrastructure as Code