GCP Security Engineer with Italian/French
Summary
Designs and implements enterprise security architectures on Google Cloud Platform, configuring native GCP controls (Cloud Armor, VPC Service Controls, IAP), building Terraform IaC modules, and embedding security into CI/CD pipelines. Works client-facing with international customers; core stack is GCP, Terraform, Python/Bash, and Linux.
- Design, implement, and optimize enterprise security architectures within Google Cloud Platform (GCP).
- Lead security assessments and deliver recommendations aligned with cloud security best practices and compliance frameworks.
- Configure and manage native GCP security controls: Cloud Armor, Cloud Firewall, VPC Service Controls (VPC SC), Identity-Aware Proxy (IAP), Cloud DNS Security, and Cloud Identity.
- Develop and maintain Infrastructure as Code (IaC) modules using Terraform to ensure secure, repeatable cloud deployments.
- Collaborate with customer infrastructure, networking, security, and application teams to implement robust security postures.
- Integrate security controls into CI/CD pipelines and modern DevSecOps workflows.
- Execute security hardening, threat monitoring, and risk mitigation across cloud environments.
- Troubleshoot complex cloud networking, identity, and access management issues.
- Provide technical guidance, architecture reviews, and knowledge transfer to customer stakeholders during remote and on-site workshops.
- Proven experience securing GCP enterprise environments, including Cloud Identity and IAM.
- Hands-on expertise with VPC Service Controls, IAP, Cloud Armor, Cloud Firewall, and Cloud DNS Security.
- Strong proficiency with Terraform (IaC), Linux/Unix administration, and scripting in Python or Bash.
- Deep understanding of cloud security, network segmentation, and zero-trust principles.
- Strong communication skills for direct, international client collaboration.
Nice to Have:
- DevSecOps pipeline integration and advanced GCP networking (VPCs, Interconnect, VPN).
- Experience in IT consulting or client-facing delivery roles.
- Relevant certifications: GCP Professional Cloud Security Engineer, CISSP, or CCSP.
- Knowledge of compliance frameworks (ISO 27001, NIST, DORA) or fluency in Italian or French.