Senior GCP Security Engineer — Terraform, GKE & AI

Madison-Davis, LLC; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Madison-Davis, LLC is seeking a Senior GCP Security Engineer to design and implement security guardrails across Google Cloud, automate controls with Terraform, and secure Kubernetes workloads. The role collaborates with engineering teams deploying AI workloads on GCP and requires deep GCP security expertise and hands-on implementation experience.

You will work on protecting Vertex AI workloads, IAM/workload identities, and integrating security into CI/CD pipelines while leveraging native GCP

Qualifications

• 5+ years of cloud security experience with significant recent GCP depth.
• Hands-on experience implementing security controls within Google Cloud.
• Production-level Terraform experience with reusable modules and automation.
• Strong Kubernetes and GKE security experience.
• Deep knowledge of GCP IAM, service accounts, Workload Identity, and workload access.
• Experience with multiple GCP security technologies such as SCC, VPC Service Controls, Cloud Armor, KMS, Secret Manager, and DLP.
• Experience incorporating security controls into modern CI/CD environments.
• Practical understanding of AI/ML security, ideally Vertex AI.
• Ability to work directly with engineering teams and remain hands-on.
• Preferred: Elastic SIEM or Elasticsearch.
• Preferred: Cribl Stream.
• Preferred: AWS security and Bedrock.
• Preferred: Policy-as-code tools (OPA/Rego, Sentinel, or Checkov).
• Preferred: Enterprise identity platforms (SailPoint, CyberArk, or Ping Identity).
• Preferred: Google Cloud security or architecture certifications.
• Preferred: Experience in financial services or regulated environments.

Responsibilities

• Design and implement security architecture and guardrails across GCP.
• Build reusable security controls and infrastructure using Terraform.
• Secure GKE clusters and Kubernetes workloads across identity, network, workload, and deployment layers.
• Govern IAM, service accounts, workload identities, and non-human access.
• Integrate security checks and controls into CI/CD pipelines.
• Protect AI and machine learning workloads, including Vertex AI and related APIs.
• Implement and operate native GCP security services for threat detection, data protection, encryption, secrets, and perimeter controls.
• Partner with cloud engineers, AI engineers, SREs, identity teams, and security stakeholders.

Skills

GCP security

Cloud security

CI/CD security

Kubernetes security

IAM & Workload Identity

Terraform automation

Vertex AI security

SCC & VPC Service Controls

Cloud Armor

KMS & Secret Manager

Tools

Terraform

Kubernetes

GKE security

Cloud Armor

Secret Manager

SCC

Job description

Madison-Davis, LLC is seeking a Senior GCP Security Engineer to design and implement security guardrails across Google Cloud, automate controls with Terraform, and secure Kubernetes workloads. The role collaborates with engineering teams deploying AI workloads on GCP and requires deep GCP security expertise and hands-on implementation experience.

You will work on protecting Vertex AI workloads, IAM/workload identities, and integrating security into CI/CD pipelines while leveraging native GCP