Lead Security Cloud Engineer – GCP

About the role

EPAM is seeking a Lead Security Cloud Engineer specialized in Google Cloud Platform (GCP) to design, implement, and operate secure cloud services that align security requirements with business outcomes. You will provide professional services and technical consulting, guiding secure cloud strategies, automation, and compliant deployments across multinational teams.

Key responsibilities

• Implement secure policies and services on GCP, including Cloud Firewall, Cloud Armor, VPC, and Security Command Center.
• Assess and mitigate security threats using SIEM tools such as Google SecOps and WiZ.
• Define security strategy with the CISO and Security Engineers to satisfy governance and regulatory requirements.
• Configure resource hierarchies, IAM, Workload Identity Federation, and boundary protection.
• Deploy network security defenses, ensure data protection, and use observability tools for threat detection.
• Leverage AI agents to automate and de‑risk complex security and infrastructure deployment tasks.
• Enable secure landing zones and AI foundations, establishing communication perimeters.
• Operate secure containerized workloads on Google Kubernetes Engine and secure CI/CD/DevSecOps pipelines.

Required profile

• 5+ years of experience implementing secure policies and services on GCP.
• Proven expertise in security threat analysis and mitigation using SIEM tools.
• Experience supporting security strategy definition and partnering with CISOs.
• Strong background enforcing regulatory controls and supporting compliance with SOC or SecOps teams.
• Hands‑on proficiency with IAM, resource hierarchies, Workload Identity Federation, and AI‑driven automation.

Required skills

• Google Cloud Platform (GCP)
• SIEM tools – Google SecOps, WiZ
• Identity and Access Management (IAM) and Workload Identity Federation
• Cloud Firewall, Cloud Armor, VPC, Security Command Center
• AI agents for automation
• Terraform for compliance‑driven deployments
• Google Kubernetes Engine (GKE) security best practices
• Secure CI/CD and DevSecOps pipelines

What we offer

• International projects with top brands
• Healthcare benefits and employee financial programs
• Paid time off, sick leave, and unlimited access to LinkedIn Learning
• Upskilling, reskilling and certification courses
• Global career opportunities and volunteer/community involvement
• Award‑winning, inclusive culture recognized by Glassdoor, Newsweek and LinkedIn