Skills:

Proven experience securing GCP enterprise environments, including Cloud Identity and IAM.
Hands-on expertise with VPC Service Controls , IAP , Cloud Armor , Cloud Firewall , and Cloud DNS Security .
Strong proficiency with Terraform (IaC) , Linux/Unix administration, and scripting in Python or Bash .
Fluency in Italian or French
Deep understanding of cloud security, network segmentation, and zero-trust principles.
Strong communication skills for direct, international client collaboration.

Nice to Have:

DevSecOps pipeline integration and advanced GCP networking ( VPCs , Interconnect , VPN ).
Experience in IT consulting or client-facing delivery roles.
Relevant certifications: GCP Professional Cloud Security Engineer , CISSP , or CCSP .
Knowledge of compliance frameworks (ISO 27001, NIST, DORA)

Design, implement, and optimize enterprise security architectures within Google Cloud Platform (GCP).
Lead security assessments and deliver recommendations aligned with cloud security best practices and compliance frameworks.
Configure and manage native GCP security controls: Cloud Armor , Cloud Firewall , VPC Service Controls (VPC SC) , Identity-Aware Proxy (IAP) , Cloud DNS Security , and Cloud Identity .
Develop and maintain Infrastructure as Code (IaC) modules using Terraform to ensure secure, repeatable cloud deployments.
Collaborate with customer infrastructure, networking, security, and application teams to implement robust security postures.
Integrate security controls into CI/CD pipelines and modern DevSecOps workflows.
Execute security hardening, threat monitoring, and risk mitigation across cloud environments.
Troubleshoot complex cloud networking, identity, and access management issues.
Provide technical guidance, architecture reviews, and knowledge transfer to customer stakeholders during remote and on-site workshops.

,[Third-Party Risk Assessments: Conduct end-to-end security risk assessments for suppliers, SaaS, cloud services, and OT solutions by evaluating technical documentation, SOC 2/ISO reports, and security evidence., Risk Advisory & Governance: Advise cross-functional teams (Procurement, Legal, Compliance) on vendor risks during onboarding and lifecycle management to align with internal security policies., Remediation & Stakeholder Engagement: Drive direct discussions with suppliers to clarify security posture, address non-compliance, and define actionable risk-remediation plans., TPRM Process Optimization: Continuously improve TPRM frameworks, methodologies, and workflows in alignment with emerging cyber threats and regulatory requirements.] Requirements: GCP, Terraform, Bash, Cloud Identity

GCP Security Engineer with Italian/French

Zacznij od adresu e-mail