GCP Security Engineer with Italian/French

Your tasks

• Design, implement, and optimize enterprise security architectures within Google Cloud Platform (GCP).
• Lead security assessments and deliver recommendations aligned with cloud security best practices and compliance frameworks.
• Configure and manage native GCP security controls: Cloud Armor, Cloud Firewall, VPC Service Controls (VPC SC), Identity-Aware Proxy (IAP), Cloud DNS Security, and Cloud Identity.
• Develop and maintain Infrastructure as Code (IaC) modules using Terraform to ensure secure, repeatable cloud deployments.
• Collaborate with customer infrastructure, networking, security, and application teams to implement robust security postures.
• Integrate security controls into CI/CD pipelines and modern DevSecOps workflows.
• Execute security hardening, threat monitoring, and risk mitigation across cloud environments.
• Troubleshoot complex cloud networking, identity, and access management issues.
• Provide technical guidance, architecture reviews, and knowledge transfer to customer stakeholders during remote and on-site workshops.

• Third-Party Risk Assessments: Conduct end-to-end security risk assessments for suppliers, SaaS, cloud services, and OT solutions by evaluating technical documentation, SOC 2/ISO reports, and security evidence.
• Risk Advisory & Governance: Advise cross-functional teams (Procurement, Legal, Compliance) on vendor risks during onboarding and lifecycle management to align with internal security policies.
• Remediation & Stakeholder Engagement: Drive direct discussions with suppliers to clarify security posture, address non-compliance, and define actionable risk-remediation plans.
• TPRM Process Optimization: Continuously improve TPRM frameworks, methodologies, and workflows in alignment with emerging cyber threats and regulatory requirements.

Requirements

• Proven experience securing GCP enterprise environments, including Cloud Identity and IAM.
• Hands-on expertise with VPC Service Controls, IAP, Cloud Armor, Cloud Firewall, and Cloud DNS Security.
• Strong proficiency with Terraform (IaC), Linux/Unix administration, and scripting in Python or Bash.
• Deep understanding of cloud security, network segmentation, and zero-trust principles.
• Strong communication skills for direct, international client collaboration.

Nice to Have

• DevSecOps pipeline integration and advanced GCP networking (VPCs, Interconnect, VPN).
• Experience in IT consulting or client-facing delivery roles.
• Relevant certifications: GCP Professional Cloud Security Engineer, CISSP, or CCSP.
• Knowledge of compliance frameworks (ISO 27001, NIST, DORA) or fluency in Italian or French.

Must have: GCP, Terraform, Bash, Cloud Identity