Practice

Cloud Security Architecture & Engineering

Location

United States and India — remote / hybrid, client-aligned

Engagement

Contract / project-based (extendable; C2H considered)

Experience

5 years preferred, incl. 3 years focused on GCP security

ABOUT CYWARDEN & THE ROLE

Cywarden, Inc. is a global cybersecurity and cloud services firm delivering advisory, implementation and managed operations for enterprise clients. Cyforte.ai, our agentic AI platform, automates and productizes that delivery — the patterns our SMEs design on engagements become the automation our clients run every day.

Security SME leading architecture and engineering across client GCP estates. You will design controls, build them, prove they work, and close the gap between security policy and what is actually enforced in the platform — credible with a CISO in the morning and writing an org policy constraint in the afternoon.

KEY RESPONSIBILITIES

Security Architecture

▪ Design and implement GCP security controls and governance across the org / folder / project hierarchy, including Organization Policy guardrails.

▪ Develop security standards and reference architectures for GCP workloads (compute, GKE, serverless, data platforms).

▪ Design identity architecture — Cloud IAM roles and conditions, custom roles, service account and key hygiene, Workload Identity Federation, IdP integration.

▪ Design network security — VPC and Shared VPC, VPC Service Controls perimeters, Private Service Connect, firewall policy and Cloud Armor.

Platform Security Engineering

▪ Implement and operate Security Command Center,



Cloud Logging, Cloud Monitoring, Cloud KMS, Secret Manager, Asset Inventory and Binary Authorization.

▪ Implement data protection — CMEK key management, encryption standards, Sensitive Data Protection (DLP) and residency controls.

▪ Implement security automation: policy-as-code, guardrail enforcement, auto-remediation and secure-by-default landing zone patterns.

Assessment, Detection & Response

▪ Perform GCP security assessments; identify misconfiguration, excessive privilege and architectural risk, prioritized by realistic impact.

▪ Design logging and detection — log sinks and routing, audit log coverage, SCC triage, and SIEM/SOAR integration (Google SecOps, Splunk).

▪ Support incident response in GCP: log forensics, blast-radius analysis, containment guidance and post-incident hardening.

Compliance & Remediation

▪ Map GCP configuration to CIS GCP Benchmark, NIST, ISO 27001, SOC 2, PCI DSS, HIPAA and GDPR requirements.

▪ Work with cloud, application and security teams to remediate identified risks hands-on, not by recommendation alone.

▪ Produce assessment reports, control standards, remediation roadmaps and executive summaries.

REQUIRED SKILLS & EXPERIENCE





▪ Solid current hands-on Google Cloud security delivery experience.

▪ Deep GCP IAM expertise — role and permission model, custom roles, IAM conditions, service accounts, Workload Identity Federation, least privilege at scale.

▪ Strong GCP networking and network security — VPC / Shared VPC, firewall policy, VPC Service Controls, private connectivity and perimeter design.

▪ Cloud security architecture and governance experience including org policy, guardrails and landing zone security.

▪ Security monitoring, logging and threat detection experience including SIEM integration and detection content.

▪ Working knowledge of regulatory and compliance requirements, with the ability to map controls and communicate risk to engineers and executives.

PREFERRED, CERTIFICATIONS & EDUCATION

Preferred: Terraform and policy-as-code (OPA/Rego, Sentinel) · Python or Go automation · Google SecOps (Chronicle) or Splunk · multi-cloud security (AWS / Azure) · GKE and supply-chain security · regulated industries · prior consulting or MSSP background.

Certifications: Google Professional Cloud Security Engineer (strongly preferred) · Professional Cloud Architect · CISSP / CCSP / CISM · Terraform Associate · CKS. Hands-on capability takes precedence over credentials.

Education: Bachelor's degree in Computer Science, Information Security, Engineering or related field, or equivalent professional experience.

Pay: ₹2,000.00 - ₹3,000.00 per hour

Work Location: Remote

📌 Google Cloud Security SME_Freelancer/Contract/Remote (India)
🏢 Cywarden
📍 India