Security Architect Google Cloud Platform (VP)

Job Description: 

As a Security Architect specializing in Google Cloud Platform, you will be pivotal in designing, implementing, and managing secure cloud environments. You will ensure that security policies are effectively integrated into GCP infrastructure and align with industry standards, addressing the needs for scalability, flexibility, and robust protection of data and applications. This role will focus on architecting and implementing security controls that protect data, ensure compliance and provide robust defenses against threats throughout the environment within Google Cloud Platform. 

Key Responsibilities: 

• Cloud Security Strategy: Develop and implement a comprehensive security strategy for Google Cloud that aligns with the organization’s business goals and compliance standards, such as GDPR, SOC 2, and HIPAA. 

• Architecture Design: Develop security infrastructure architectures and frameworks, focusing on protecting sensitive data and mitigating risks across networks, storage, applications, and authentication services using automation across a hybrid cloud architecture. 

• Data Security and Encryption: Design and enforce encryption and rest and in transit between all compute boundaries 

• Vulnerability Management: Proactively monitor GCP environments for vulnerabilities, manage threat detection, and ensure prompt response to potential security incidents. 

• Cross-Functional Collaboration: Work closely with engineering, development, SRE, and operations teams to enforce security policies and integrate security best practices into the development lifecycle. 

• Team Leadership and Training: Guide the security team, promote security awareness across the organization, and ensure compliance with industry standards (e.g., ISO 27001, NIST). 

Required Skills and Qualifications: 

• Educational Background: Bachelor’s degree in computer science, Information Technology, or related field. Master’s degree or security certifications (CISSP, CCSK, Google Professional Cloud Security Engineer) preferred. 

• Experience: Extensive experience in cloud security architecture, with a strong focus on Virtual Desktop Infrastructure (VDI) deployed on GCP Infrastructure; experience with AWS or Azure is beneficial. 

• GCP / AWS Expertise: In-depth understanding of CSP core infrastructure services, security services, encryption practices, and compliance frameworks. Deep understanding of IAM, RBAC, Cloud Identity and Zero trust principles for managing secure access to data and applications in the cloud. Expertise in networking, including VPC’s subnets, firewall configurations, Cloud VPN etc.  

• Scripting and configuration management: Experience with scripting and configuration management tools like Bash, Python, Ansible, Puppet, and Chef 

• Analytical Skills: Ability to assess complex security risks, identify vulnerabilities, and design effective security solutions. 

• Git versioning: GIT is a version control software that's commonly used to store and keep track of any changes to your source code. 

• Communication Skills: Proven ability to communicate technical information to stakeholders, including those with limited technical expertise and work with cross-functionality to enforce security measures.