Senior GCP Security Engineer

Madison-Davis; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Madison-Davis, LLC is seeking a Senior GCP Security Engineer to design and implement security guardrails across Google Cloud, automate controls with Terraform, and secure Kubernetes workloads. The role collaborates with engineering teams deploying AI workloads on GCP and requires deep GCP security expertise and hands-on implementation experience.

You will work on protecting Vertex AI workloads, IAM/workload identities, and integrating security into CI/CD pipelines while leveraging native GCP

Qualifications

• 5+ years of cloud security experience with significant recent GCP depth.
• Hands-on experience implementing security controls within Google Cloud.
• Production-level Terraform experience with reusable modules and automation.
• Strong Kubernetes and GKE security experience.
• Deep knowledge of GCP IAM, service accounts, Workload Identity, and workload access.
• Experience with multiple GCP security technologies such as SCC, VPC Service Controls, Cloud Armor, KMS, Secret Manager, and DLP.
• Experience incorporating security controls into modern CI/CD environments.
• Practical understanding of AI/ML security, ideally Vertex AI.
• Ability to work directly with engineering teams and remain hands-on.
• Preferred: Elastic SIEM or Elasticsearch.
• Preferred: Cribl Stream.
• Preferred: AWS security and Bedrock.
• Preferred: Policy-as-code tools (OPA/Rego, Sentinel, or Checkov).
• Preferred: Enterprise identity platforms (SailPoint, CyberArk, or Ping Identity).
• Preferred: Google Cloud security or architecture certifications.
• Preferred: Experience in financial services or regulated environments.

Responsibilities

• Design and implement security architecture and guardrails across GCP.
• Build reusable security controls and infrastructure using Terraform.
• Secure GKE clusters and Kubernetes workloads across identity, network, workload, and deployment layers.
• Govern IAM, service accounts, workload identities, and non-human access.
• Integrate security checks and controls into CI/CD pipelines.
• Protect AI and machine learning workloads, including Vertex AI and related APIs.
• Implement and operate native GCP security services for threat detection, data protection, encryption, secrets, and perimeter controls.
• Partner with cloud engineers, AI engineers, SREs, identity teams, and security stakeholders.

Skills

GCP security

Cloud security

CI/CD security

Kubernetes security

IAM & Workload Identity

Terraform automation

Vertex AI security

SCC & VPC Service Controls

Cloud Armor

KMS & Secret Manager

Tools

Terraform

Kubernetes

GKE security

Cloud Armor

Secret Manager

SCC

Job description

A large financial services organization is expanding its Google Cloud and AI capabilities and is seeking a Senior GCP Security Engineer to help build security directly into its cloud engineering environment. This is a hands-on engineering position for someone who can move between architecture and implementation. You will design cloud security guardrails, automate controls through Terraform and CI/CD, secure Kubernetes workloads and cloud identities, and work closely with engineering teams deploying applications and AI workloads across GCP. The role is particularly well suited for someone who combines deep Google Cloud security experience with modern infrastructure-as-code, Kubernetes security, identity, and emerging AI security.

RESPONSIBILITIES

• Design and implement security architecture and guardrails across GCP.
• Build reusable security controls and infrastructure using Terraform.
• Secure GKE clusters and Kubernetes workloads across identity, network, workload, and deployment layers.
• Govern IAM, service accounts, workload identities, and non-human access.
• Integrate security checks and controls into CI/CD pipelines.
• Protect AI and machine learning workloads, including Vertex AI, LLM APIs, agents, and RAG environments.
• Implement and operate native GCP security services for threat detection, data protection, encryption, secrets, and perimeter controls.
• Partner with cloud engineers, AI engineers, SREs, identity teams, and security stakeholders.

Role Requirements

• 5+ years of cloud security experience with significant recent GCP depth.
• Strong hands-on experience implementing security controls within Google Cloud.
• Production-level Terraform experience, including reusable modules and infrastructure automation.
• Strong Kubernetes and GKE security experience.
• Deep knowledge of GCP IAM, service accounts, Workload Identity, and workload access.
• Experience with multiple GCP security technologies such as SCC, VPC Service Controls, Cloud Armor, KMS, Secret Manager, and DLP.
• Experience incorporating security controls into modern CI/CD environments.
• Practical understanding of AI / ML security, ideally involving Vertex AI or comparable enterprise GenAI platforms.
• Ability to work directly with engineering teams and remain personally hands-on.
• PREFERRED EXPERIENCE: Elastic SIEM or Elasticsearch.
• PREFERRED EXPERIENCE: Cribl Stream.
• PREFERRED EXPERIENCE: AWS security and Bedrock.
• PREFERRED EXPERIENCE: Policy-as-code tools such as OPA/Rego, Sentinel, or Checkov.
• PREFERRED EXPERIENCE: Enterprise identity platforms such as SailPoint, CyberArk, or Ping Identity.
• PREFERRED EXPERIENCE: Google Cloud security or architecture certifications.
• PREFERRED EXPERIENCE: Experience with financial services or another heavily regulated environment.