GCP Cloud Security Architect (NCS/Job/ 3969)

• Lead the definition and evolution of the overall GCP cloud security architecture, aligning with organizational security strategy, business objectives, and industry best practices (e.g., Google Cloud Security Foundations Blueprint, NIST, ISO 27001, CIS Benchmarks).
• Develop comprehensive security reference architectures, patterns, and blueprints specifically leveraging GCP native controls for various use cases (e.g., secure data lakes, microservices on GKE, serverless applications, hybrid connectivity).
• Conduct advanced threat modeling, risk assessments, and security posture reviews for complex GCP environments and new cloud initiatives, identifying native GCP solutions for mitigation.
• Evaluate and recommend new GCP security features, tools, and services to enhance the cloud security posture and capabilities.
• Develop comprehensive security reference architectures, patterns, and blueprints specifically leveraging GCP native controls for various use cases (e.g., secure data lakes, microservices on GKE, serverless applications, hybrid connectivity).
• Conduct advanced threat modeling, risk assessments, and security posture reviews for complex GCP environments and new cloud initiatives, identifying native GCP solutions for mitigation.
• Evaluate and recommend new GCP security features, tools, and services to enhance the cloud security posture and capabilities.
• Develop comprehensive security reference architectures, patterns, and blueprints specifically leveraging GCP native controls for various use cases (e.g., secure data lakes, microservices on GKE, serverless applications, hybrid connectivity).
• Conduct advanced threat modeling, risk assessments, and security posture reviews for complex GCP environments and new cloud initiatives, identifying native GCP solutions for mitigation.
• Evaluate and recommend new GCP security features, tools, and services to enhance the cloud security posture and capabilities.
• Develop complex CI/CD pipelines to deploy security controls through DevSecOps. Ability to define policy as a code and security as code, must have good understanding on IaC templates. 

Education & Certifications

• Certified GCP Associate Engineer/ Professional/Security