Hybrid GCP Security Architect: End-to-End Cloud Defense

New York Life; New York (NY); Hybrid; USD 124,000 - 177,000; Full time

Job summary

New York Life is seeking a Senior GCP Security Engineer who lives on GCP and can own the security architecture end-to-end. You will design guardrails, write Terraform, integrate with Harness CI/CD pipelines, and partner with engineering teams to ensure every resource deployed is secure by default.

The role emphasizes GCP-first security across IAM, GKE, Vertex AI, and AI/ML security, with familiarity in multi-cloud but primary focus on Google Cloud.

Qualifications

• 5+ years of experience in cloud security, with the majority focused on GCP environments.
• Deep hands-on experience with GCP security services including IAM, VPC Service Controls, Cloud Armor, KMS, Secret Manager, DLP, and SCC.
• Strong Elastic SIEM experience including log ingestion, detection engineering, alert management, and threat correlation.
• Production-level Terraform experience including module development, infrastructure automation, and state management.
• Experience integrating security controls into CI/CD pipelines using Harness or equivalent platforms.
• Strong knowledge of Kubernetes and GKE security including pod security admission, network policies, Workload Identity, and Binary Authorization.
• Hands-on experience with ICAM or enterprise identity platforms governing non-human identities and workload access.
• Practical knowledge of AI/ML security including Vertex AI workload protection, LLM API governance, and training data security.

Responsibilities

• Own the security architecture end-to-end on GCP, not just advisory.
• Design guardrails and ensure every resource deployed is secure by default.
• Integrate security controls into CI/CD pipelines using Harness or equivalent.
• Collaborate with engineering teams to secure GKE workloads and Vertex AI pipelines.

Skills

GCP security

IAM & VPC Service Controls

Cloud Armor

KMS & Secret Manager

DLP & SCC

Elastic SIEM

Terraform

Harness CI/CD

GKE security

ICAM

Vertex AI security

Tools

Terraform

Harness CI/CD

Elastic SIEM

Cribl Stream

Job description

New York Life is seeking a Senior GCP Security Engineer who lives on GCP and can own the security architecture end-to-end. You will design guardrails, write Terraform, integrate with Harness CI/CD pipelines, and partner with engineering teams to ensure every resource deployed is secure by default.

The role emphasizes GCP-first security across IAM, GKE, Vertex AI, and AI/ML security, with familiarity in multi-cloud but primary focus on Google Cloud.