Senior Security Cloud Engineer - GCP

We are seeking a Senior Security Cloud Engineer with deep expertise in Google Cloud Platform to implement, operate, and support secure cloud services and strategies, bridging complex technical security requirements with executive business goals through professional services and technical consulting engagement. Responsibilities Implement secure policies and services on Google Cloud Platform Analyze and mitigate security threats using SIEM tools such as Google SecOps and WiZ Support security strategy definition in collaboration with the CISO and Security Engineers to meet governance requirements Enforce regulatory controls and support compliance requirements alongside SOC or SecOps teams Configure resource hierarchies, establish boundary protection, and secure communications through Identity and Access Management (IAM) and Workload Identity Federation (WIF) Implement network security defenses, ensure data protection, and utilize observability tools for threat detection and management Leverage AI agents to automate, expedite, and de-risk complex security and infrastructure deployment tasks Support secure landing zones and data and AI foundations, setting up perimeters for user-to-agent, agent-to-agent, and agent-to-services communication Support security-focused digital transformation using Infrastructure as Code for compliance-driven deployment of security foundations Operate secure containerized workloads via Google Kubernetes Engine and secure the software CI/CD and DevSecOps pipelines Collaborate and communicate with stakeholders to align technical requirements with business objectives Requirements 3+ years of experience implementing secure policies and services, preferably on Google Cloud Platform Expertise in security threat analysis and mitigation using SIEM tools such as Google SecOps, WiZ, and similar tools Experience supporting security strategy definition and working with CISOs and Security Engineers on governance requirements Experience enforcing regulatory controls and supporting compliance requirements with SOC or SecOps teams Expertise in Identity and Access Management, resource hierarchies, boundary protection, secure communications, and Workload Identity Federation best practices Proficiency in implementing Cloud Firewall, Cloud Armor, and VPC, along with data protection and Security Command Center for threat detection Expertise in leveraging AI agents to automate and de-risk security and infrastructure deployment tasks Expertise in secure landing zones and data and AI foundations for user-to-agent, agent-to-agent, and agent-to-services communication perimeters Skills in Terraform for compliance-driven security deployments, Google Kubernetes Engine security best practices, and securing CI/CD and DevSecOps pipelines Proven track record in Professional Services and Technical Consulting with communication, collaboration, and negotiation skills English proficiency at B2 level or higher Nice to have Google Professional Cloud Security Engineer certification Google Professional Cloud Architect certification Google Professional Security Operations Engineer certification We offer International projects with top brands Work with global teams of highly skilled, diverse peers Healthcare benefits Employee financial programs Paid time off and sick leave Upskilling, reskilling and certification courses Unlimited access to the LinkedIn Learning library and 22,000+ courses Global career opportunities Volunteer and community involvement opportunities EPAM Employee Groups Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

Implement secure policies and services on Google Cloud Platform Analyze and mitigate security threats using SIEM tools such as Google SecOps and WiZ Support security strategy definition in collaboration with the CISO and Security Engineers to meet governance requirements Enforce regulatory controls and support compliance requirements alongside SOC or SecOps teams Configure resource hierarchies, establish boundary protection, and secure communications through Identity and Access Management (IAM) and Workload Identity Federation (WIF) Implement network security defenses, ensure data protection, and utilize observability tools for threat detection and management Leverage AI agents to automate, expedite, and de-risk complex security and infrastructure deployment tasks Support secure landing zones and data and AI foundations, setting up perimeters for user-to-agent, agent-to-agent, and agent-to-services communication Support security-focused digital transformation using Infrastructure as Code for compliance-driven deployment of security foundations Operate secure containerized workloads via Google Kubernetes Engine and secure the software CI/CD and DevSecOps pipelines Collaborate and communicate with stakeholders to align technical requirements with business objectives

3+ years of experience implementing secure policies and services, preferably on Google Cloud Platform Expertise in security threat analysis and mitigation using SIEM tools such as Google SecOps, WiZ, and similar tools Experience supporting security strategy definition and working with CISOs and Security Engineers on governance requirements Experience enforcing regulatory controls and supporting compliance requirements with SOC or SecOps teams Expertise in Identity and Access Management, resource hierarchies, boundary protection, secure communications, and Workload Identity Federation best practices Proficiency in implementing Cloud Firewall, Cloud Armor, and VPC, along with data protection and Security Command Center for threat detection Expertise in leveraging AI agents to automate and de-risk security and infrastructure deployment tasks Expertise in secure landing zones and data and AI foundations for user-to-agent, agent-to-agent, and agent-to-services communication perimeters Skills in Terraform for compliance-driven security deployments, Google Kubernetes Engine security best practices, and securing CI/CD and DevSecOps pipelines Proven track record in Professional Services and Technical Consulting with communication, collaboration, and negotiation skills English proficiency at B2 level or higher

International projects with top brands Work with global teams of highly skilled, diverse peers Healthcare benefits Employee financial programs Paid time off and sick leave Upskilling, reskilling and certification courses Unlimited access to the LinkedIn Learning library and 22,000+ courses Global career opportunities Volunteer and community involvement opportunities EPAM Employee Groups Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.