Hybrid Cloud Network Security Engineer (GCP)

X Development, LLC; Mountain View (CA); Hybrid; USD 174,000 - 255,000; Full time

Benefits offered by this job

Competitive salary

Equity

Health benefits

Generous PTO

Hybrid work model

401(k)

Job summary

Tapestry, a Google-affiliated group, is seeking a Network Security Engineer to own the architectural design, implementation, and operations of our perimeter and cloud networks across GCP environments. You will secure inter-application connectivity and guardrails, enforce security controls, and audit networks for vulnerabilities to protect the AI-powered electric grid.

Join a cross-functional team and implement Terraform-based security policies, leveraging VPC-SC, Cloud Armor, and other tools.

Qualifications

• Bachelor's or Master's in Computer Science, Computer Engineering, or equivalent experience.
• 5+ years of experience in network security engineering, cloud-native security, or a closely related infrastructure security field.
• Deep expertise in cloud networking security, including experience with GCP services like VPC Service Controls (VPC-SC), Cloud Armor, Cloud IDS, and Identity-Aware Proxy (IAP).
• Strong understanding of networking protocols, perimeter defenses, and DDoS mitigation strategies across all layers of the OSI model.
• Proven experience with IaC tools, specifically Terraform, for building and managing security policies as code.
• Excellent communication and collaboration skills to navigate technical ambiguity and align cross-functional engineering teams on secure design patterns.

Responsibilities

• Design, deploy, and govern secure GCP networking architecture, including VPC-SC and zero default VPC configurations to ensure secure connectivity and strictly prevent the use of public endpoints.
• Leverage GCP network security tools including Cloud Armor, VPC-SC, Cloud NAT, and Private Service Connect to enforce a private-only network perimeter and prevent public access to production resources.
• Protect Tapestry's global grid infrastructure from multi-layer DDoS threats, ensuring resilient, high-availability connectivity across OSI layers.
• Engineer and codify security policies as Terraform code (Security as Code), ensuring automated, version-controlled, and auditable firewall rules, VPC peering, and access controls.
• Audit cloud and perimeter networks for security gaps, misconfigurations, and drift, partnering with engineering teams to drive rapid vulnerability resolutions.
• Implement boundary controls, secure inter-app connectivity, and ensure no external IPs or unauthenticated boundary paths across production systems.
• Align architecture with ISO 27001, SOC 2, and energy-specific standards like NERC CIP and FERC CEII enclaves.
• Partner with AppSec, SecEng/Ops, DataSec, DevOps and Grid Engineering to implement network security telemetry and monitoring.

Skills

Security architecture

Terraform

DDoS mitigation

GCP networking security

IaC

Analytical thinking

Cross‑functional collaboration

Education

Bachelor's or Master's in CS/CE

Tools

Terraform

GCP tools (VPC-SC, Cloud Armor, Cloud IDS)

Job description

Tapestry, a Google-affiliated group, is seeking a Network Security Engineer to own the architectural design, implementation, and operations of our perimeter and cloud networks across GCP environments. You will secure inter-application connectivity and guardrails, enforce security controls, and audit networks for vulnerabilities to protect the AI-powered electric grid.

Join a cross-functional team and implement Terraform-based security policies, leveraging VPC-SC, Cloud Armor, and other tools.