GCP CLoud Security Engineer

Security Engineer – GCP Cloud
Location: Remote – East Coast, USA
Travel: Must be able to travel to Florham Park, NJ, as needed
Employment Type: Contract
Experience: 8+ Years
About the Role
We are seeking an experienced Security Engineer with strong hands-on Google Cloud Platform (GCP) security experience to secure, monitor, and support enterprise cloud environments.
This is a hands-on engineering position focused on implementing cloud security controls, managing identity and access, investigating security incidents, remediating vulnerabilities and misconfigurations, and strengthening the overall security posture of GCP environments.
The ideal candidate will have deep experience with GCP security services, IAM, cloud network security, Incident Response, security monitoring, and vulnerability remediation. Experience with Okta and CyberArk is highly desirable.
Key Responsibilities
Implement, configure, and manage security controls across enterprise Google Cloud Platform (GCP) environments.
Secure GCP services including IAM, service accounts, workload identity, networking, logging, monitoring, encryption, and security policies.
Implement and maintain least-privilege access, RBAC, service-account governance, workload identity, and privileged-access controls.
Monitor GCP environments for security threats, suspicious activities, vulnerabilities, and configuration issues.
Perform end-to-end Incident Response, including investigation, triage, containment, remediation, root-cause analysis, and post-incident activities.
Analyze cloud security logs, alerts, and telemetry to identify and investigate potential security incidents.
Identify and remediate cloud vulnerabilities, security misconfigurations, excessive permissions, and security-control gaps.
Work with Google Security Command Center, Cloud Logging, Cloud Monitoring, and Organization Policies.
Implement security controls for VPCs, firewall policies, private connectivity, network segmentation, and workload protection.
Conduct cloud security assessments, configuration reviews, threat analysis, and remediation activities.
Collaborate with Cloud, DevOps, Infrastructure, Application, and Security Operations teams.
Support security automation and integration of cloud security controls into engineering and operational processes.
Participate in security investigations and provide technical recommendations to prevent recurrence.
Support enterprise identity and privileged-access integrations using technologies such as Okta and CyberArk.
Required Qualifications
8+ years of overall IT/Security experience, with strong recent experience in Cloud Security Engineering.
Strong hands-on experience securing Google Cloud Platform (GCP) environments.
Deep understanding of GCP IAM, service accounts, workload identity, Organization Policies, Security Command Center, Cloud Logging, and Cloud Monitoring.
Hands-on cloud network security experience including VPCs, firewall rules/policies, private connectivity, and network segmentation.
Strong hands-on Incident Response experience within cloud or enterprise environments.
Experience investigating security alerts, analyzing logs, determining root causes, and implementing remediation.
Strong understanding of IAM, least privilege, RBAC, federation, privileged access, encryption, and secrets management.
Experience identifying and remediating cloud security vulnerabilities and misconfigurations.
Understanding of Zero Trust and cloud security architecture principles.
Ability to collaborate with technical teams during security incidents and drive issues through resolution.
Preferred Qualifications
Hands-on Okta experience including SSO, MFA, federation, SAML/OIDC, identity integrations, and user lifecycle management.
Experience with CyberArk for Privileged Access Management (PAM), credential vaulting, privileged-account management, and access controls.
Experience with SIEM/SOAR platforms and security monitoring.
Experience with Terraform / Infrastructure-as-Code (IaC) and cloud security automation.
Scripting experience using Python, PowerShell, Bash, or similar technologies.
Experience securing Kubernetes/GKE environments.
Knowledge of security standards and frameworks such as NIST, CIS Benchmarks, SOC 2, and ISO 27001.
Relevant certifications in GCP, Cloud Security, CISSP, CyberArk, or Okta.

Work arrangement
Yes