Cloud Security Engineer – GCP

Halian | Managed Services, Recruitment and Contract Staffing Agency; Dhahran Compound; On-site; SAR 300,000 - 420,000; Full time

Benefits offered by this job

GCP Certification desirable

Job summary

Halian is seeking a Cloud Security Engineer with strong Google Cloud Platform expertise for an onsite role in Dhahran, Saudi Arabia. The role focuses on securing GCP workloads, IAM, network controls, and encryption, using Terraform-driven configurations.

Candidates should have 5+ years of cloud security experience, a solid foundation in security principles, and hands-on experience with Security Command Center, Chronicle, and GCP data protection tools. The 12-month contract may extend.

Qualifications

• 5+ years dedicated cloud security experience with deep GCP expertise.
• Pure security background with strong cloud concepts and core security principles (CIA triad, zero trust).
• Experience securing legacy systems and non-cloud-native tooling.
• Hands-on with Security Command Center, Google SecOps, and GCP data protection tools.
• Strong Kubernetes/GKE security knowledge and Terraform usage for controls.
• Clear CMEK vs. CSEK understanding.

Responsibilities

• Deploy and tune Security Command Center, Google SecOps (Chronicle), and GCP data protection tools
• Secure Kubernetes/GKE workloads and container runtimes
• Manage IAM, network controls (VPC, Cloud Armor), and encryption (KMS) via Terraform
• Apply defense-in-depth across network, workload, and data layers
• Support migration of legacy security controls into GCP

Skills

GCP expertise

Cloud security engineering

Terraform

Kubernetes security

IAM & encryption

Security Command Center

Tools

Kubernetes

Terraform

KMS CMEK

Job description

Designation: Cloud Security Engineer – GCP

Location: Dhahran, Saudi Arabia (Onsite)

Contract: 12 months, extendable

About the Role:

We're hiring a Cloud Security Engineer with a strong traditional security background who later specialized in Google Cloud someone who started in core security (legacy systems, non-cloud-native tooling) before moving into cloud security.

What You'll Do

• Deploy and tune Security Command Center, Google SecOps (Chronicle), and GCP data protection tools
• Secure Kubernetes/GKE workloads and container runtimes
• Manage IAM, network controls (VPC, Cloud Armor), and encryption (KMS) via Terraform
• Apply defense-in-depth across network, workload, and data layers
• Support migration of legacy security controls into GCP

What We’re Looking For

• 5+ years dedicated cloud security experience, deep GCP expertise
• Pure security background (no cloud in early career); strong foundations in cloud concepts and core security principles (CIA triad, zero trust, least privilege, defense in depth)
• Proven experience securing legacy, non-cloud-native systems (firewalls, IDS/IPS, legacy OS, security appliances)
• Hands‑on with Security Command Center, Google SecOps, GCP data protection tools
• Strong Kubernetes/GKE security knowledge
• Terraform experience for security controls (firewall rules, IAM, encryption keys)
• Hands‑on KMS/encryption key configuration; clear CMEK vs. CSEK understanding

Nice to have: Professional Cloud Security Engineer certification or any other GCP Professional certification