Cloud Security Engineer - (GCP Data Security)
On-sitePhoenix, Arizona, United States
Job Summary
Conduct comprehensive security assessments of cloud-based architectures supporting conversational AI and enterprise applications on Google Cloud Platform. Analyze data movement across APIs, telephony systems, and storage platforms to identify security concerns, while evaluating identity controls, encryption strategies, and logging capabilities. Review database configurations and network security designs, including Shared VPCs and hybrid integrations, to enforce policy controls and mitigate AI-specific risks. Collaborate with engineering teams to deliver actionable remediation plans and detailed assessment reports outlining security gaps and compliance strategies. This 12-month contract role requires a consultant with deep expertise in GCP security services, IAM, and API security to strengthen the overall security posture of integrated enterprise environments.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related technical discipline.
- Minimum 7 years of experience in cloud security architecture, security consulting, or enterprise security assessments.
- Strong expertise in Google Cloud Platform security services and architecture.
- Hands-on experience with Google Cloud IAM, Shared VPC, Cloud Run, GKE, BigQuery, Cloud Storage, Firestore/Datastore, Cloud KMS, and Secret Manager.
- Experience evaluating security controls for sensitive and regulated data, including PII, PCI, or similar compliance requirements.
- Strong understanding of API security principles, including OAuth, mutual TLS (mTLS), secure token management, API gateways, and service authentication.
- Knowledge of hybrid cloud networking, firewalls, private connectivity, and secure network segmentation.
- Experience reviewing security logging, audit trails, SIEM integrations, and monitoring frameworks.
- Strong understanding of threat modeling methodologies and security architecture review processes.
- Excellent analytical, documentation, and communication skills.
Desired Qualifications
- Experience securing conversational AI or virtual assistant platforms.
- Familiarity with telephony infrastructure, SIP integrations, or enterprise contact center technologies.
- Knowledge of industry security and compliance frameworks such as PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.
- Understanding of AI governance, large language model security, prompt injection risks, and GenAI security best practices.
- Experience implementing cloud security policies and governance within enterprise-scale Google Cloud environments.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.