Senior Cloud Security Engineer, GCP & Cloudflare

PVH (Tommy Hilfiger/Calvin Klein); Chicago (IL); On-site; USD 180,000 - 240,000; Full time

Job summary

PVH (Tommy Hilfiger/Calvin Klein) is seeking a Staff Cloud Security Engineer to set technical direction for securing our cloud workloads on GCP. You will design edge defenses with Cloudflare and Cloud Armor, build policy-as-code guardrails, and drive security across IAM, KMS, and Compliance.

You will mentor engineers and lead incident response efforts. The role emphasizes risk-aware architectural decisions, cross-functional collaboration, and enabling engineers to move fast without compromising

Qualifications

• 8+ years of experience in security engineering, including 5+ years in cloud security.
• Hands-on with Google Cloud Platform environments: IAM, networking, VPC Service Controls, Security Command Center, KMS, Organization Policy.
• Production experience with Cloudflare: WAF, DDoS Protection, Zero Trust/Access, Bot Management, and Cloud Armor.
• IaC and CI/CD security: Terraform modules and secure pipelines.

Responsibilities

• Own cloud security architecture across GCP environments, including IAM and least privilege design.
• Design, deploy, and tune edge and application defenses using Cloudflare and Google Cloud Armor.
• Lead threat modeling and security reviews for new services and major platform changes.
• Build guardrails as code through policy-as-code and secure Terraform modules.
• Advance cloud detection/response by partnering with SOC and IR teams on logging and SIEM detections.
• Respond as senior technical responder during incidents: investigation, containment, remediation, hardening.
• Translate ISO, SOC 2, SOX into scalable technical controls with GRC.
• Mentor engineers to raise security maturity; represent Cloud Security in planning.

Skills

Cloud security

Threat modeling

IAM design

Terraform / IaC

Python/Go

Incident response

Security architecture

Mentoring

Tools

Terraform

Cloudflare

Google Cloud Armor

Chronicle/SIEM

Job description

PVH (Tommy Hilfiger/Calvin Klein) is seeking a Staff Cloud Security Engineer to set technical direction for securing our cloud workloads on GCP. You will design edge defenses with Cloudflare and Cloud Armor, build policy-as-code guardrails, and drive security across IAM, KMS, and Compliance.

You will mentor engineers and lead incident response efforts. The role emphasizes risk-aware architectural decisions, cross-functional collaboration, and enabling engineers to move fast without compromising