Cloud Security Architect

TechDigital Group; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

TechDigital Group is seeking a cloud security expert with strong hands-on experience in Google Cloud Platform. Responsibilities include implementing VPC Control security, deep engagement with GCP security services, and integrating security controls into CI/CD pipelines.

The ideal candidate will possess extensive Terraform experience and a solid understanding of Kubernetes security. This role offers an exciting opportunity to work in a dynamic environment with cutting-edge technologies.

Qualifications

• Experience in cloud security, particularly GCP environments.
• Deep hands-on experience with GCP security services.
• Strong Elastic SIEM experience, including threat correlation.

Responsibilities

• Implement and maintain VPC Control security.
• Integrate security controls into CI/CD pipelines.
• Manage log ingestion and alert management effectively.

Skills

Google Cloud Platform Security

VPC Control implementation

IAM, Secret Manager & SEIM

Terraform

Kubernetes Security

CI/CD integration

Job description

Top 3 Skills Required for this Role

• Google Cloud Platform Security
• VPC Control implementation & maintenance
• IAM, Secret Manager & SEIM

Job Description / Responsibilities

• Experience in cloud security, with the majority focused on GCP environments.
• Deep hands‑on experience with GCP security services including IAM, VPC Service Controls, Cloud Armor, KMS, Secret Manager, DLP, and SCC.
• Strong Elastic SIEM experience including log ingestion, detection engineering, alert management, and threat correlation.
• Production‑level Terraform experience including module development, infrastructure automation, and state management.
• Experience integrating security controls into CI/CD pipelines using Harness or equivalent platforms.
• Strong knowledge of Kubernetes and GKE security, including pod security admission, network policies, Workload Identity, and Binary Authorization.
• Hands‑on experience with ICAM or enterprise identity platforms governing non‑human identities and workload access.
• Practical knowledge of AI/ML security, including Vertex AI workload protection, LLM API governance, and training data security.