Senior Security Cloud Engineer - GCP

EPAM Systems Inc; United States; Remote; USD 140.000 - 190.000; Vollzeit

Zusammenfassung

EPAM Systems Inc. seeks a Senior Security Cloud Engineer with deep Google Cloud Platform expertise to implement, operate, and support secure cloud services aligning with business goals.

This role focuses on secure landing zones, IAM governance, and CI/CD security within a consulting framework. You will collaborate with CISOs and Security Engineers, enforce regulatory controls, and drive cloud security strategy across professional services engagements.

Qualifikationen

• 3+ years of experience implementing secure policies and services on Google Cloud Platform.
• Experience with SIEM tools (Google SecOps, WiZ) and governance requirements.
• Expertise in IAM, boundary protection, and Workload Identity Federation best practices.
• Proficiency with Cloud Firewall, Cloud Armor, and Security Command Center for threat detection.

Aufgaben

• Implement secure policies and services on Google Cloud Platform.
• Analyze and mitigate security threats using SIEM tools such as Google SecOps and WiZ.
• Support security strategy definition in collaboration with the CISO and Security Engineers to meet governance requirements.
• Enforce regulatory controls and support compliance requirements alongside SOC or SecOps teams.
• Configure resource hierarchies, establish boundary protection, and secure communications through IAM and Workload Identity Federation.
• Implement network security defenses, ensure data protection, and utilize observability tools for threat detection and management.
• Leverage AI agents to automate, expedite, and de-risk security and infrastructure deployment tasks.
• Support secure landing zones and data and AI foundations, setting up perimeters for user-to-agent, agent-to-agent, and agent-to-services communication.
• Support security-focused digital transformation using Infrastructure as Code for compliance-driven deployment of security foundations.
• Operate secure containerized workloads via Google Kubernetes Engine and secure the software CI/CD and DevSecOps pipelines.
• Collaborate and communicate with stakeholders to align technical requirements with business objectives.

Kenntnisse

Google Cloud Platform

SIEM tools

IAM

Workload Identity Federation

Terraform

GKE

DevSecOps

CI/CD

Security policy

Security architecture

Tools

Google SecOps

WiZ

Cloud Armor

VPC

Security Command Center

Kubernetes Engine

Jobbeschreibung

We are seeking a Senior Security Cloud Engineer with deep expertise in Google Cloud Platform to implement, operate, and support secure cloud services and strategies, bridging complex technical security requirements with executive business goals through professional services and technical consulting engagement.

Responsibilities

• Implement secure policies and services on Google Cloud Platform
• Analyze and mitigate security threats using SIEM tools such as Google SecOps and WiZ
• Support security strategy definition in collaboration with the CISO and Security Engineers to meet governance requirements
• Enforce regulatory controls and support compliance requirements alongside SOC or SecOps teams
• Configure resource hierarchies, establish boundary protection, and secure communications through Identity and Access Management (IAM) and Workload Identity Federation (WIF)
• Implement network security defenses, ensure data protection, and utilize observability tools for threat detection and management
• Leverage AI agents to automate, expedite, and de-risk complex security and infrastructure deployment tasks
• Support secure landing zones and data and AI foundations, setting up perimeters for user-to-agent, agent-to-agent, and agent-to-services communication
• Support security-focused digital transformation using Infrastructure as Code for compliance-driven deployment of security foundations
• Operate secure containerized workloads via Google Kubernetes Engine and secure the software CI/CD and DevSecOps pipelines
• Collaborate and communicate with stakeholders to align technical requirements with business objectives

Requirements

• 3+ years of experience implementing secure policies and services, preferably on Google Cloud Platform
• Expertise in security threat analysis and mitigation using SIEM tools such as Google SecOps, WiZ, and similar tools
• Experience supporting security strategy definition and working with CISOs and Security Engineers on governance requirements
• Experience enforcing regulatory controls and supporting compliance requirements with SOC or SecOps teams
• Expertise in Identity and Access Management, resource hierarchies, boundary protection, secure communications, and Workload Identity Federation best practices
• Proficiency in implementing Cloud Firewall, Cloud Armor, and VPC, along with data protection and Security Command Center for threat detection
• Expertise in leveraging AI agents to automate and de-risk security and infrastructure deployment tasks
• Expertise in secure landing zones and data and AI foundations for user-to-agent, agent-to-agent, and agent-to-services communication perimeters
• Skills in Terraform for compliance-driven security deployments, Google Kubernetes Engine security best practices, and securing CI/CD and DevSecOps pipelines
• Proven track record in Professional Services and Technical Consulting with communication, collaboration, and negotiation skills
• English proficiency at B2 level or higher

Nice to have

• Google Professional Cloud Security Engineer certification
• Google Professional Cloud Architect certification
• Google Professional Security Operations Engineer certification