Lead Security Cloud Engineer – GCP

About the role

EPAM is seeking a Lead Security Cloud Engineer specialized in Google Cloud Platform to design, implement, and operate secure cloud services that align security requirements with business outcomes. You will provide professional services and technical consulting, guiding secure cloud strategies, automation, and compliant deployments across multiple teams.

Key responsibilities

• Implement secure policies and services on Google Cloud Platform, including Cloud Firewall, Cloud Armor, VPC, and Security Command Center.
• Assess and mitigate security threats using SIEM tools such as Google SecOps and WiZ.
• Define security strategy with the CISO and Security Engineers to satisfy governance and regulatory requirements.
• Configure resource hierarchies, boundary protection, IAM, and Workload Identity Federation.
• Deploy network security defenses, ensure data protection, and use observability tools for threat detection.
• Leverage AI agents to automate and de‑risk complex security and infrastructure deployment tasks.
• Enable secure landing zones and AI foundations, establishing perimeters for user‑to‑agent, agent‑to‑agent, and agent‑to‑service communications.
• Drive security‑focused digital transformation using Infrastructure as Code (Terraform) for compliance‑driven deployments.
• Secure containerized workloads on Google Kubernetes Engine and protect CI/CD and DevSecOps pipelines.

Required profile

• 5+ years of experience implementing secure policies and services on Google Cloud Platform.
• Proven expertise in security threat analysis and mitigation with SIEM tools (Google SecOps, WiZ).
• Experience defining security strategy with CISO and supporting regulatory compliance alongside SOC/SecOps teams.
• Strong knowledge of IAM, resource hierarchies, boundary protection, and Workload Identity Federation best practices.
• Hands‑on experience with Terraform for compliance‑driven security deployments.

Required skills

• Google Cloud Platform (GCP)
• SIEM tools: Google SecOps, WiZ
• Identity and Access Management (IAM)
• Workload Identity Federation (WIF)
• Cloud Firewall, Cloud Armor, VPC
• Security Command Center
• AI agents for automation
• Terraform
• Google Kubernetes Engine (GKE)
• CI/CD and DevSecOps pipeline security

What we offer

• International projects with top brands
• Global career opportunities and work with diverse, highly skilled teams
• Healthcare benefits and employee financial programs
• Paid time off, sick leave, and upskilling/reskilling programs
• Access to LinkedIn Learning library (22,000+ courses) and certification courses
• Volunteer and community involvement opportunities
• Award‑winning culture recognized by Glassdoor, Newsweek and LinkedIn