GCP security engineer

SNI; United States; Remote; USD 101,000 - 157,000; Full time

Job summary

SNI ищет инженера по безопасности GCP для работы с клиентами в ЕС. Роль включает проектирование, внедрение и оптимизацию безопасных архитектур в GCP, внедрение нод контроля и участие в командах разработки и эксплуатации.

Кандидат должен владеть знаниями IAM, Cloud Armor, Terraform и языками Python/Bash, а также иметь опыт взаимодействия с международными клиентами и владение английским языком.

Qualifications

• Опыт обеспечения безопасности в корпоративной среде GCP.
• Знание Cloud Identity, IAM и управляемых сервисов GCP.

Responsibilities

• Разработка и внедрение архитектур безопасности в GCP.
• Оценка угроз и рекомендации по соответствию принципам zero-trust.
• Настройка и управление контролями безопасности: Cloud Armor, IAP, VPC SC.
• Разработка IaC модулей на Terraform, обеспечение повторяемых развёртываний.
• Интеграция мер безопасности в CI/CD и DevSecOps.

Skills

GCP Security

Terraform (IaC)

Python/Bash

IAM & Cloud Identity

Cloud Armor & IAP

Zero Trust

Education

GCP Security Certifications (Professional Cloud Security Engineer)

CISSP / CCSP (optional)

Tools

Linux/Unix

Terraform

Job description

Описание:

SNI is serving as a trusted IT Outsourcing partner in line with the needs of World's most prestigious firms and carried out successful projects worldwide. For one of our clients based in the EU, we are currently looking for a GCP Security Engineer.

Задачи:

Design, implement, and optimize enterprise security architectures within Google Cloud Platform (GCP). Lead security assessments and deliver recommendations aligned with cloud security best practices and compliance frameworks. Configure and manage native GCP security controls: Cloud Armor, Cloud Firewall, VPC Service Controls (VPC SC), Identity-Aware Proxy (IAP), Cloud DNS Security, and Cloud Identity. Develop and maintain Infrastructure as Code (IaC) modules using Terraform to ensure secure, repeatable cloud deployments. Collaborate with customer infrastructure, networking, security, and application teams to implement robust security postures. Integrate security controls into CI/CD pipelines and modern DevSecOps workflows. Execute security hardening, threat monitoring, and risk mitigation across cloud environments. Troubleshoot complex cloud networking, identity, and access management issues. Provide technical guidance, architecture reviews, and knowledge transfer to customer stakeholders during remote and on-site workshops.

Требования:

Proven experience securing GCP enterprise environments, including Cloud Identity and IAM. Hands-on expertise with VPC Service Controls, IAP, Cloud Armor, Cloud Firewall, and Cloud DNS Security. Strong proficiency with Terraform (IaC), Linux/Unix administration, and scripting in Python or Bash. Deep understanding of cloud security, network segmentation, and zero-trust principles. Strong communication skills for direct, international client collaboration. Fluent English (written/spoken) and EU citizenship (or unrestricted EU work authorization). Будет плюсом: DevSecOps pipeline integration and advanced GCP networking (VPCs, Interconnect, VPN); Experience in IT consulting or client-facing delivery roles; Relevant certifications: GCP Professional Cloud Security Engineer, CISSP, or CCSP; Knowledge of compliance frameworks (ISO 27001, NIST, DORA) or fluency in Italian or French

Условия:

Start date: ASAP Contract Duration: 6 months with extension Location: EU Travel: Required for customer engagements, primarily within Europe