Security Specialist – GCP

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Implement and support compliance controls for FedRAMP High and IL4 across the design and implementation of Google Cloud Platform Landing Zones.

• Convert compliance and security requirements into configurations for technical security controls.

• Set up and oversee Assured Workloads, VPC Service Controls, Customer-Managed Encryption Keys (CMEK), and Security Command Center (SCC).

• Assist Cloud Architects during the transition to the Landing Zone and the activation of security controls.

• Offer technical documentation and compliance advice for handover processes.

• Validate cloud infrastructure to ensure it meets FedRAMP High and IL4 standards.

• Review Cloud Engineering and DevOps infrastructure prior to production approval and final sign-off.

• Evaluate pre-cutover infrastructure compliance before the introduction of sensitive customer data.

• Work collaboratively with architecture, engineering, DevOps, and compliance teams.

• Aid in vulnerability management and the continuous enhancement of cloud security practices.

⛳️ Requirements

• Proven experience in implementing compliance controls for FedRAMP High and/or IL4.

• Familiarity with Google Cloud Platform (GCP) Landing Zones.

• Strong understanding of Assured Workloads.

• Demonstrated experience in implementing and managing VPC Service Controls.

• Proficiency with Customer-Managed Encryption Keys (CMEK).

• Knowledge and practical experience with Security Command Center (SCC).

• Experience in validating cloud infrastructure against security and regulatory compliance standards.

• Ability to translate compliance needs into technical security configurations.

• Solid understanding of cloud security principles and cybersecurity best practices.

• Background in vulnerability management and security assessments.

• Experience operating within highly regulated cloud environments.

• Nice to have: experience in enabling security controls during Landing Zone transition activities.

• Nice to have: collaboration with Cloud Architects, Cloud Engineers, and DevOps teams.

• Nice to have: experience supporting environments that handle Controlled Unclassified Information (CUI).

• Nice to have: understanding of cloud governance, security operations, and risk management practices.

• Nice to have: participation in large-scale cloud transformation or modernization programs.

• Nice to have: familiarity with multi-location delivery models and distributed teams.

• Attention to detail.

• Strong communication skills.

• Analytical thinking.

• Problem-solving abilities.

• Capability for collaboration.

• Stakeholder management skills.

• Teamwork orientation.

• Adaptability.

• Proactive mindset.

• Decision-making skills.

• Relationship-building capabilities.

• Self-management skills.

• Strategic thinking.

• Conflict resolution skills.

🏝️ Benefits

• Flexible hours.

• Remote work opportunities.

• Multidisciplinary teams and collaboration.

• Diverse global team and learning environment.

• Personalized career development plans.

• Training programs.

• High-impact projects with leading industry clients.