Remote Principal Google Cloud Security Architect

Coalfire; United States; A distancia; USD 127.000 - 212.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible work model

Descripción de la vacante

Coalfire is seeking a Principal Google Cloud Security Consultant to act as a senior advisor, technical architect, and delivery leader for enterprise GCP security engagements. You will design, secure, deploy, and operationalize Google Cloud environments while translating business risk into scalable security programs.

Remote-friendly role with up to 25% travel. You’ll guide customers on Vertex AI security, SOC workflows, and threat remediation while developing architecture diagrams, runbooks, and

Formación

• Experience leading Google Cloud security engagements.
• Ability to translate business risk into security program requirements.
• Knowledge of cloud security controls, threat modeling, and incident response.

Responsabilidades

• Lead secure Google Cloud architecture design and reviews across IAM, networking, workload protection, data protection, logging, monitoring, and compliance.
• Advise enterprise customers on GCP security strategy aligned to business risk, regulatory requirements, and operating priorities.
• Lead Google Cloud security posture assessments to identify high-impact risks, misconfigurations, control gaps, and operational weaknesses.
• Advise customers on Wiz use cases such as CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows.
• Advise customers on Google SecOps, Chronicle, SIEM strategy, cloud telemetry strategy, detection engineering, and SOC workflow design.
• Develop executive-ready findings, prioritized remediation roadmaps, and maturity-based security improvement plans.
• Lead Security Command Center and Security Command Center Enterprise implementation, configuration, tuning, and operationalization.
• Integrate Security Command Center findings into vulnerability management, compliance, security operations, and executive risk reporting workflows.
• Support SIEM modernization and migration planning, including log source rationalization, detection migration, alert tuning, and operational transition.
• Help customers move from fragmented monitoring approaches into scalable, cloud-native security operations models.
• Own complex technical workstreams from discovery through delivery, including technical direction, scope, risks, and stakeholder coordination.
• Translate technical security findings into clear business risks, investment priorities, and actionable recommendations for senior leaders.
• Guide customer teams through secure Google Cloud design, configuration, deployment, and operational maturity decisions.
• Advise on Vertex AI and AI workload security, including identity, access control, data protection, governance, logging, and monitoring.
• Create architecture diagrams, assessment deliverables, roadmaps, implementation documentation, and operational runbooks.
• Develop repeatable methodologies, assessment frameworks, implementation patterns, reference architectures, and reusable technical assets.
• Mentor consultants and help raise the overall capability of the Google Cloud Security practice.
• Provide technical leadership during client reviews, executive briefings, architecture discussions, and operational meetings.
• Contribute to process improvement and automation initiatives that improve consistency, scalability, and delivery quality.

Conocimientos

GCP security

Cloud security architecture

SIEM

Vertex AI security

Terraform

Herramientas

Wiz

Chronicle

Terraform

Descripción del empleo

Coalfire is seeking a Principal Google Cloud Security Consultant to act as a senior advisor, technical architect, and delivery leader for enterprise GCP security engagements. You will design, secure, deploy, and operationalize Google Cloud environments while translating business risk into scalable security programs.

Remote-friendly role with up to 25% travel. You’ll guide customers on Vertex AI security, SOC workflows, and threat remediation while developing architecture diagrams, runbooks, and