Cloud Security Engineer

Job Title: Cloud Security Engineer Location: Phoenix, AZ Experience Required: 7+ Years Role Overview We are seeking an experienced Cloud Security Engineer to support and secure enterprise Google Cloud Platform (GCP) environments. This role will be responsible for conducting security assessments, validating cloud architectures, implementing security controls, and ensuring compliance with enterprise security standards and regulatory requirements. The ideal candidate will have strong expertise in GCP security, cloud governance, risk management, and secure-by-design principles. Required Skills & Qualifications7+ years of experience in Cloud Security, Cybersecurity, or Cloud Infrastructure SecurityHands-on experience performing security assessments and reviews of GCP environmentsStrong expertise with core GCP services including:Identity & Access Management (IAM)Virtual Private Cloud (VPC)Compute EngineCloud StorageCloud SQLGoogle Kubernetes Engine (GKE)Cloud KMSCloud LoggingSecurity Command CenterExperience reviewing GitHub repositories, code, and configuration files (JSON, YAML, etc.) for security and compliance validationStrong understanding of:Secure identity architecturePrivileged access managementNetwork segmentationEncryption and key managementGCP Shared Responsibility ModelOrganization Policy FrameworkExperience with GCP-native security tools such as:Security Command Center (SCC)Event Threat DetectionCloud Asset InventoryForseti or equivalent governance toolsAbility to review Infrastructure-as-Code (Terraform, Deployment Manager) for security risks and compliance requirementsExperience mapping cloud implementations to security frameworks including:NISTISO 27001CIS GCP FoundationsCSA CCMStrong documentation, communication, and stakeholder management skills Roles & ResponsibilitiesConduct comprehensive security reviews and risk assessments of GCP services, architectures, and cloud workloadsEvaluate cloud solutions across infrastructure, platform, and application layers to ensure compliance with security standardsProvide security recommendations and remediation guidance to support secure-by-design cloud adoptionSupport cloud governance, certification, and authorization initiativesImplement and maintain GCP cybersecurity controls and security servicesCollaborate with cloud engineering, architecture, and application teams to strengthen cloud security postureAssess cloud environments against enterprise security policies and regulatory requirementsSupport continuous improvement of cloud security assessment methodologies and standardsContribute to platform security engineering initiatives and cloud security automation efforts Preferred QualificationsExperience validating GitHub schema definitions and configuration standardsKnowledge of policy-as-code and compliance automation tools such as:Config ValidatorOPA/GatekeeperExperience securing containerized and serverless workloads including:GKECloud RunCloud FunctionsGoogle Professional Cloud Security Engineer CertificationExperience with developer portals and governance platforms such as Cortex, Backstage, Prisma, or similar solutionsExperience with Cloud Security Posture Management (CSPM) platforms Key SkillsGoogle Cloud Platform (GCP)Cloud Security EngineeringIAM & Access ManagementKubernetes Security (GKE)Terraform & Infrastructure as CodeSecurity Command CenterCloud Governance & ComplianceGitHub Security ReviewsCSPM ToolsNIST / ISO 27001 / CIS ControlsPolicy as CodeRisk & Security Assessments Job Title: Cloud Security Engineer Location: Phoenix, AZ Experience Required: 7+ Years Role Overview We are seeking an experienced Cloud Security Engineer to support and secure enterprise Google Cloud Platform (GCP) environments. This role will be responsible for conducting security assessments, validating cloud architectures, implementing security controls, and ensuring compliance with enterprise security standards and regulatory requirements. The ideal candidate will have strong expertise in GCP security, cloud governance, risk management, and secure-by-design principles. Required Skills & Qualifications7+ years of experience in Cloud Security, Cybersecurity, or Cloud Infrastructure SecurityHands-on experience performing security assessments and reviews of GCP environmentsStrong expertise with core GCP services including:Identity & Access Management (IAM)Virtual Private Cloud (VPC)Compute EngineCloud StorageCloud SQLGoogle Kubernetes Engine (GKE)Cloud KMSCloud LoggingSecurity Command CenterExperience reviewing GitHub repositories, code, and configuration files (JSON, YAML, etc.) for security and compliance validationStrong understanding of:Secure identity architecturePrivileged access managementNetwork segmentationEncryption and key managementGCP Shared Responsibility ModelOrganization Policy FrameworkExperience with GCP-native security tools such as:Security Command Center (SCC)Event Threat DetectionCloud Asset InventoryForseti or equivalent governance toolsAbility to review Infrastructure-as-Code (Terraform, Deployment Manager) for security risks and compliance requirementsExperience mapping cloud implementations to security frameworks including:NISTISO 27001CIS GCP FoundationsCSA CCMStrong documentation, communication, and stakeholder management skills Roles & ResponsibilitiesConduct comprehensive security reviews and risk assessments of GCP services, architectures, and cloud workloadsEvaluate cloud solutions across infrastructure, platform, and application layers to ensure compliance with security standardsProvide security recommendations and remediation guidance to support secure-by-design cloud adoptionSupport cloud governance, certification, and authorization initiativesImplement and maintain GCP cybersecurity controls and security servicesCollaborate with cloud engineering, architecture, and application teams to strengthen cloud security postureAssess cloud environments against enterprise security policies and regulatory requirementsSupport continuous improvement of cloud security assessment methodologies and standardsContribute to platform security engineering initiatives and cloud security automation efforts Preferred QualificationsExperience validating GitHub schema definitions and configuration standardsKnowledge of policy-as-code and compliance automation tools such as:Config ValidatorOPA/GatekeeperExperience securing containerized and serverless workloads including:GKECloud RunCloud FunctionsGoogle Professional Cloud Security Engineer CertificationExperience with developer portals and governance platforms such as Cortex, Backstage, Prisma, or similar solutionsExperience with Cloud Security Posture Management (CSPM) platforms Key SkillsGoogle Cloud Platform (GCP)Cloud Security EngineeringIAM & Access ManagementKubernetes Security (GKE)Terraform & Infrastructure as CodeSecurity Command CenterCloud Governance & ComplianceGitHub Security ReviewsCSPM ToolsNIST / ISO 27001 / CIS ControlsPolicy as CodeRisk & Security Assessments