Security Specialist

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Implement and maintain compliance controls for FedRAMP High and IL4 during the design and execution phases of the Google Cloud Platform Landing Zone.

• Convert compliance and security requirements set by Cloud Architects into technical configurations for security controls.

• Set up and oversee Assured Workloads, VPC Service Controls, Customer-Managed Encryption Keys (CMEK), and the Security Command Center (SCC).

• Assist Cloud Architects throughout the Landing Zone cutover activities and the processes for enabling security controls.

• Offer technical documentation and compliance-related advice during handover activities.

• Assess cloud infrastructure implementations for adherence to FedRAMP High and IL4 standards.

• Evaluate infrastructure provided by Cloud Engineering and DevOps teams prior to production approval and sign-off.

• Examine pre-cutover infrastructure for compliance before the introduction of sensitive customer data.

• Collaborate with architecture, engineering, DevOps, and compliance teams.

• Aid in vulnerability management and the continuous enhancement of cloud security practices.

⛳️ Requirements

• Proven experience in implementing FedRAMP High and/or IL4 compliance controls.

• Familiarity with Google Cloud Platform (GCP) Landing Zones.

• Strong understanding of Assured Workloads.

• Experience in implementing and managing VPC Service Controls.

• Proficiency with Customer-Managed Encryption Keys (CMEK).

• Knowledge and practical experience with Security Command Center (SCC).

• Background in validating cloud infrastructure against security and regulatory compliance frameworks.

• Capability to translate compliance requirements into technical security configurations.

• Solid grasp of cloud security principles and best practices in cybersecurity.

• Experience in vulnerability management and conducting security assessments.

• Experience in highly regulated cloud environments.

• Nice to Have: Experience assisting with security control enablement during Landing Zone cutover and transition activities.

• Nice to Have: Experience collaborating closely with Cloud Architects, Cloud Engineers, and DevOps teams.

• Nice to Have: Experience supporting environments that handle Controlled Unclassified Information (CUI).

• Nice to Have: Understanding of cloud governance, security operations, and risk management practices.

• Nice to Have: Involvement in large-scale cloud transformation or modernization projects.

• Nice to Have: Familiarity with multi-location delivery models and distributed teams.

🏝️ Benefits

• Flexible working hours.

• Remote work opportunities.

• Diverse global team.

• Customized career development plans.

• Training programs.

• High-impact projects with leading industry clients.