Security Architect (GCP)

About the role

Lumenalta is looking for an experienced Security Architect with deep cloud security expertise to join a high‑stakes Google Cloud Platform (GCP) engagement. This senior, hands‑on position is responsible for designing and validating the security posture of a multi‑tenant cloud architecture.

Key responsibilities

• Design and enforce GCP security controls, including VPC Service Controls, Credential Access Boundaries, and least‑privilege IAM policies across multi‑tenant environments.
• Conduct penetration testing focused on tenant‑boundary validation, API manipulation, privilege escalation, and lateral movement.
• Lead threat modeling and architectural security reviews, producing risk assessments and remediation plans.
• Validate identity propagation security to ensure tenant isolation throughout the stack.
• Design and implement DLP controls, data retention policies, and compliance/audit frameworks.
• Defend architectural decisions in formal security review panels, communicating mitigations and residual risk.
• Manage operational security controls, risk frameworks, and InfoSec governance.
• Identify emerging threats and implement countermeasures using advanced detection technologies.
• Collaborate with engineering and product teams to embed security requirements from design through delivery.

Required profile

• 7+ years of experience in cybersecurity or cloud security architecture.
• Proven ownership of security design in production multi‑tenant environments at scale.
• Deep hands‑on expertise with GCP security primitives.

Required skills

• Google Cloud Platform (GCP)
• VPC Service Controls
• Credential Access Boundaries (CABs)
• IAM policy design and implementation
• Penetration testing
• Threat modeling
• Data Loss Prevention (DLP) controls
• Compliance and audit frameworks
• Identity propagation security
• Risk assessment and governance