Senior GCP Security Engineer

Madison-Davis, LLC; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Madison-Davis, LLC seeks a Senior GCP Security Engineer to design and implement cloud security guardrails in a hands-on role, spanning architecture and implementation. You will drive secure Kubernetes workloads, IAM governance, and CI/CD integration for AI workloads across GCP.

You will apply Terraform-based controls, protect Vertex AI workloads, and collaborate with cloud, SRE, and identity teams to enforce security across the environment.

Qualifications

• 5+ years of cloud security experience with significant recent GCP depth.
• Strong hands-on experience implementing security controls within Google Cloud.
• Production-level Terraform experience with reusable modules and automation.
• Strong Kubernetes and GKE security experience.
• Deep knowledge of GCP IAM, service accounts, Workload Identity, and workload access.
• Experience with SCC, VPC Service Controls, Cloud Armor, KMS, Secret Manager, and DLP.
• Experience integrating security controls into modern CI/CD environments.
• Practical understanding of AI/ML security, ideally Vertex AI.

Responsibilities

• Design and implement security architecture and guardrails across GCP.
• Build reusable security controls and infrastructure using Terraform.
• Secure GKE clusters and Kubernetes workloads across identity, network, workload, and deployment layers.
• Govern IAM, service accounts, workload identities, and non-human access.
• Integrate security checks and controls into CI/CD pipelines.
• Protect AI and machine learning workloads, including Vertex AI and related APIs.
• Implement and operate native GCP security services for threat detection and data protection.

Skills

GCP security

Terraform

Kubernetes security

IAM & workload identity

CI/CD security

Vertex AI security

Tools

Terraform

GKE

SCC

VPC Service Controls

Cloud Armor

KMS

Secret Manager

DLP

Job description

A large financial services organization is expanding its Google Cloud and AI capabilities and is seeking a Senior GCP Security Engineer to help build security directly into its cloud engineering environment.

This is a hands‑on engineering position for someone who can move between architecture and implementation. You will design cloud security guardrails, automate controls through Terraform and CI/CD, secure Kubernetes workloads and cloud identities, and work closely with engineering teams deploying applications and AI workloads across GCP.

The role is particularly well suited for someone who combines deep Google Cloud security experience with modern infrastructure-as-code, Kubernetes security, identity, and emerging AI security.

Responsibilities

• Design and implement security architecture and guardrails across GCP.
• Build reusable security controls and infrastructure using Terraform.
• Secure GKE clusters and Kubernetes workloads across identity, network, workload, and deployment layers.
• Govern IAM, service accounts, workload identities, and non‑human access.
• Integrate security checks and controls into CI/CD pipelines.
• Protect AI and machine learning workloads, including Vertex AI, LLM APIs, agents, and RAG environments.
• Implement and operate native GCP security services for threat detection, data protection, encryption, secrets, and perimeter controls.
• Partner with cloud engineers, AI engineers, SREs, identity teams, and security stakeholders.

Role Requirements

• 5+ years of cloud security experience with significant recent GCP depth.
• Strong hands‑on experience implementing security controls within Google Cloud.
• Production‑level Terraform experience, including reusable modules and infrastructure automation.
• Strong Kubernetes and GKE security experience.
• Deep knowledge of GCP IAM, service accounts, Workload Identity, and workload access.
• Experience with multiple GCP security technologies such as SCC, VPC Service Controls, Cloud Armor, KMS, Secret Manager, and DLP.
• Experience incorporating security controls into modern CI/CD environments.
• Practical understanding of AI / ML security, ideally involving Vertex AI or comparable enterprise GenAI platforms.
• Ability to work directly with engineering teams and remain personally hands‑on.

Nice to Have

• Elastic SIEM or Elasticsearch.
• Cribl Stream.
• AWS security and Bedrock.
• Policy‑as‑code tools such as OPA/Rego, Sentinel, or Checkov.
• Enterprise identity platforms such as SailPoint, CyberArk, or Ping Identity.
• Google Cloud security or architecture certifications.
• Experience with financial services or another heavily regulated environment.