L

Senior Security Architect - GCP Cloud Security

Lumenalta • European Economic Area
Remote
This Job is No Longer Active This position is no longer accepting applications

Design and enforce cloud security controls on GCP for multi-tenant environments, including VPC Service Controls, Credential Access Boundaries, and least-privilege IAM policies. Conduct penetration testing, threat modeling, and formal security reviews to validate tenant isolation and defend architectural decisions. Requires 7+ years of cloud security experience with deep expertise in GCP security primitives and identity propagation.

Key Highlights
Design and enforce GCP security controls for multi-tenant environments
Conduct penetration testing and threat modeling for tenant boundary validation
Lead formal security reviews and defend architectural decisions
Key Responsibilities
Design and enforce cloud security controls on GCP including VPC Service Controls perimeters, Credential Access Boundaries, and least-privilege IAM policies across multi-tenant environments
Conduct penetration testing focused on tenant boundary validation, API and gs:// URI manipulation, privilege escalation paths, and lateral movement scenarios
Lead threat modeling and architectural security reviews, translating complex platform designs into structured risk assessments and actionable remediation plans
Validate identity propagation security across front-to-back delegation chains, ensuring tenant isolation is enforced at every layer of the architecture
Design and implement DLP controls, data retention policies, and compliance/audit posture frameworks aligned with regulatory requirements
Defend architectural decisions in formal security reviews including Studio Content Security checkpoints, communicating threat mitigations and control rationale to security review panels
Manage operational security controls, risk frameworks, and InfoSec governance to ensure confidentiality, integrity, and availability of all data assets
Identify emerging threats and vulnerabilities, implementing countermeasures and mitigations through advanced detection technologies and governance frameworks
Collaborate with engineering and product stakeholders to embed security requirements from design through delivery
Technical Skills Required
GCP security primitives VPC Service Controls Credential Access Boundaries least-privilege IAM
Benefits & Perks
Fully remote position
6-hour overlap with US business hours
Nice to Have
Certified Information Systems Security Professional (CISSP)
Offensive Security Certified Professional (OSCP)
Google Professional Cloud Security Engineer certification
Working knowledge of AWS security services

Job Description

At Lumenalta, we partner with forward-thinking organizations to build technology solutions that scale, delight users, and accelerate business growth. Our global teams bring curiosity, commitment, and technical excellence to every project. We value transparency, autonomy, and impact—empowering every team member to do their best work.

Want the full job description? Read the complete details on LinkedIn, the original posting.
Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.

See Jaabz jobs first on Google 1 tap · free · in AI Overviews Jaabz is on your Google Manage Preferred Sources
Keep exploring

Similar Jobs

Explore other opportunities that match your interests

Hidden company

Log in to see location

Premium

Application Security Engineer

Cyber Security Full-time Entry level 14m ago

Log in free to see the details

Remote Work Guides

Practical guides for finding and thriving in remote roles.

Browse all articles

Subscribe to our newsletter

New visa sponsorship, relocation and remote tech jobs, delivered to your inbox.