GCP Security Engineer Forward Deployed Senior Consultant

PowerToFly; California (MO); On-site; USD 135,000 - 265,000; Full time

Job summary

Deloitte's Cloud Cyber Security team seeks a GCP Forward Deployed Engineer, Senior Consultant, to secure GCP and AI workloads at scale. You will work directly with client engineering teams to design, build, and operate secure-by-default environments and automated security controls across GCP services and pipelines.

The role emphasizes hands-on engineering, production security ownership, and mentoring while delivering reusable assets and concepts for future engagements.

Qualifications

• 5+ years of experience in cloud security, cybersecurity, technology risk, or technology consulting.
• 3+ years hands-on experience designing, building, or operating security solutions in Google Cloud Platform (GCP).
• 2+ years of experience using Terraform to deploy infrastructure-as-code in production environments.
• Experience implementing policy-as-code and guardrail frameworks, including Google Cloud Organization Policies, Open Policy Agent, Checkov, or tfsec.
• Experience integrating security controls into CI/CD pipelines, including SAST/DAST, SCA, secrets scanning, or IaC scanning, with Python, Bash, or Go.

Responsibilities

• Embed within client cloud, platform, and engineering teams to design, build, deploy, ship, and operate automated security controls across GCP environments, from design to production ownership.
• Design, implement, and harden security controls for Google Cloud generative AI and ML services, including Gemini AI, Gemini Enterprise Agent Platform, Model Garden, and Model Armor, plus securing workloads on GKE with pod security, network policies, WIF, runtime protection, image scanning, and admission controls.
• Implement data protection and DLP capabilities using Google Cloud DLP, KMS, tokenization and encryption patterns, Security Command Center, Organization Policies, IAM Policy Analyzer, and Cloud Logging for monitoring and remediation.
• Write Terraform-based infrastructure-as-code, embed guardrails and policy-as-code, develop reusable landing zone modules, and integrate security scanning into live developer workflows (SAST, DAST, SCA, secrets scanning, IaC scanning).
• Navigate client environments, own deployed security controls in production, tune performance, lead workstreams, and mentor to support future engagements.

Tools

Terraform

Open Policy Agent

Checkov

tfsec

Python

Bash

Go

Google Cloud Platform (GCP)

Job description

Deloitte's Cloud Cyber Security team seeks a GCP Forward Deployed Engineer, Senior Consultant, to secure GCP and AI workloads at scale. You will work directly with client engineering teams to design, build, and operate secure-by-default environments and automated security controls across GCP services and pipelines.

The role emphasizes hands-on engineering, production security ownership, and mentoring while delivering reusable assets and concepts for future engagements.