Senior GCP Security Engineer — Hands-On IAM, GKE & SIEM

KPG99 INC; New York (NY); On-site; USD 150,000 - 230,000; Full time

Job summary

KPG99 INC in New York is seeking a Senior GCP Security Engineer who owns the security architecture end-to-end. You will design guardrails, implement Terraform modules, and integrate security controls within Harness CI/CD pipelines for secure-by-default deployments.

The role focuses on GCP-first operations—securing GKE workloads, Vertex AI pipelines, and ICAM-based identities. Familiarity with AWS/Azure is a plus, but daily work centers on Google Cloud security best practices.

Qualifications

• 5+ years of cloud security experience, mainly in GCP.
• Hands-on with GCP security services: IAM, VPC Service Controls, Cloud Armor, KMS, Secret Manager, DLP, SCC.
• Elastic SIEM with log ingestion, detection engineering, alert management, threat correlation.
• Terraform production-level experience with modules, automation, state management.
• CI/CD integration using Harness or similar.
• Kubernetes and GKE security knowledge: pod security policies, network policies, Workload Identity, Binary Authorization.
• ICAM or enterprise identity platforms governing non-human identities.
• AI/ML security including Vertex AI workload protection, LLM API governance, data security.

Responsibilities

• Own the end-to-end security architecture on GCP.
• Design guardrails and govern GKE workloads and Vertex AI pipelines.
• Write Terraform modules and automate infrastructure.
• Integrate security controls into CI/CD pipelines with Harness.
• Collaborate with engineering teams to ensure secure-by-default deployments.
• Manage identities and access controls via ICAM.

Skills

GCP security

Terraform

Harness CI/CD

Kubernetes security

ICAM management

AI/ML security

Education

Google Professional Cloud Security Engineer

Tools

Elastic SIEM

GKE

Cloud Armor

IAM

VPC Service Controls

KMS

Job description

KPG99 INC in New York is seeking a Senior GCP Security Engineer who owns the security architecture end-to-end. You will design guardrails, implement Terraform modules, and integrate security controls within Harness CI/CD pipelines for secure-by-default deployments.

The role focuses on GCP-first operations—securing GKE workloads, Vertex AI pipelines, and ICAM-based identities. Familiarity with AWS/Azure is a plus, but daily work centers on Google Cloud security best practices.