GCP Network Security Engineer (Zero-Trust)

Tapestry; Mountain View, San Francisco, Austin, New York (CA, CA, TX, NY); Hybrid; USD 174,000 - 255,000; Full time

Benefits offered by this job

Competitive salary and equity

Medical, dental, and vision coverage

Generous PTO and flexible hybrid work

Job summary

Tapestry is seeking a Network Security Engineer to own the design, implementation, and operation of perimeter and cloud networks across GCP environments. You will secure inter-application connectivity, enforce security controls, and audit networks while collaborating with cross-functional teams on secure design patterns.

You will contribute to a scalable security program with Terraform, Cloud Armor, and VPC-SC, aiming to prevent public access and protect critical infrastructure in a hybrid work

Qualifications

• Bachelor's or Master’s in Computer Science, Computer Engineering, or equivalent experience.
• 5+ years of experience in network security engineering, cloud-native security, or a closely related infrastructure security field.
• Deep expertise in cloud networking security, including experience with GCP services like VPC-SC, Cloud Armor, Cloud IDS, and Identity-Aware Proxy (IAP).
• Strong technical understanding of networking protocols, perimeter defenses, and DDoS mitigation strategies across all layers of the OSI model.
• Proven experience with Infrastructure-as-Code (IaC) tools, specifically Terraform, for building and managing security policies as code.

Responsibilities

• Design, deploy, and govern secure GCP networking architecture, including VPC Service Controls and zero default VPC configurations.
• Leverage GCP network security tools such as Cloud Armor, VPC-SC, Cloud NAT, and Private Service Connect to enforce a private-only network perimeter.
• Protect global grid infrastructure from multi-layer DDoS threats and ensure resilient, high-availability connectivity across OSI layers.
• Engineer security policies as Terraform code, ensuring firewall rules, VPC peering, and access control are automated and auditable.
• Audit cloud and perimeter networks for gaps, misconfigurations, and drift, partnering with engineering teams to drive rapid remediation.
• Implement boundary controls and ensure no external IPs or unauthenticated paths exist in production.

Skills

Cloud networking security

GCP networking

Security as Code

Terraform

DDoS mitigation

Education

Bachelor's or Master’s in Computer Science/Engineering

Tools

Terraform

GitHub Actions

Cloud Armor

Job description

Tapestry is seeking a Network Security Engineer to own the design, implementation, and operation of perimeter and cloud networks across GCP environments. You will secure inter-application connectivity, enforce security controls, and audit networks while collaborating with cross-functional teams on secure design patterns.

You will contribute to a scalable security program with Terraform, Cloud Armor, and VPC-SC, aiming to prevent public access and protect critical infrastructure in a hybrid work