Original listing text, shown exactly as published by the company.
About the Role
We are looking for a Cloud Security Engineer with strong experience in Google Cloud Platform (GCP), Kubernetes (GKE), VPNs and Cloudflare to design, implement, and maintain secure cloud-native infrastructure. The ideal candidate will work closely with DevOps, SRE, and engineering teams to enforce security best practices across applications, networks, and infrastructure.
Responsibilities
-> Cloud & Infrastructure Security
- Design and implement security controls across GCP environments
- Secure GKE clusters including RBAC, network policies, and workload identity
- Implement least privilege access (IAM) and enforce security boundaries
- Manage secrets using GCP Secret Manager
-> Kubernetes Security (GKE)
- Harden Kubernetes workloads and cluster configurations
- Implement Pod Security Standards (PSS), Network Policies & Admission Controllers (OPA/Gatekeeper)
- Monitor and mitigate container vulnerabilities
-> Network & Edge Security (Cloudflare)
- Configure and manage Cloudflare WAF, DDoS protection, and rate limiting
- Implement Zero Trust Access (ZTNA) policies
- Secure APIs using Cloudflare security features
- Manage DNS security and SSL/TLS configurations
-> Monitoring, Detection & Incident Response
- Implement security monitoring using:
- GCP Cloud Logging & Monitoring
- SIEM tools (e.g., Splunk, Datadog, Chronicle)
- Define alerting rules and respond to security incidents
- Conduct root cause analysis (RCA) and post-incident reviews
-> Compliance & Governance
- Ensure compliance with standards such as ISO 27001, SOC2, CIS Benchmarks
- Perform regular security audits and vulnerability assessments
- Automate compliance checks using policy-as-code tools
Requirements
- Strong hands-on experience with Google Cloud Platform (GCP): IAM, VPC, Cloud Armor, Cloud Logging, Security Command Center
- Deep understanding of Kubernetes (GKE):
-> RBAC, Network Policies, Ingress/Egress control
->Service Mesh (Istio) security concepts (mTLS, policies)
- Experience with Cloudflare [WAF, Zero Trust, Access, DNS, CDN security]
- Proficiency in at least one: Python / Go / Bash
- Experience with Terraform / Helm
Nice to Have
- Experience with service mesh security (Istio, Linkerd)
- Knowledge of Zero Trust architecture…
