Cloud Security / Identity & Secrets Engineer

Mandatory Skills:Cloud Security, Google Kubernetes Engine (GKE)
Job Description:
Key Responsibilities-
Implement identity, secrets, posture, supply-chain, and auditable release controls across Google Cloud platforms and agent delivery workflows.
Skill Requirements-

• Design enterprise IAM architectures for users, workloads, applications, agents, and delivery pipelines.
• Implement Workload Identity Federation and GKE Workload Identity to eliminate long-lived credentials.
• Develop Secret Manager lifecycle management, including storage, access control, rotation, auditing, and consumption.
• Design Cloud KMS architectures supporting encryption, signing, rotation, and key governance.
• Implement Terraform-based security baselines, organization policies, IAM controls, and compliance guardrails.
• Secure Cloud Build, GitLab, APIs, webhooks, connectors, and service-to-service communication.
• Build software supply-chain security controls, including SBOM generation, scanning, provenance, and attestations.
• Implement Binary Authorization policies enforcing trusted artifact deployment.
• Operationalize Security Command Center and Artifact Analysis for continuous risk visibility.
• Implement GKE security controls covering RBAC, namespaces, workload identity, admission controls, and network security.
• Secure Agentic AI workloads through authorization, tool governance, approval workflows, and audit controls.
• Design enterprise logging, SIEM integrations, evidence collection, compliance reporting, and forensic readiness.
• Implement key, token, certificate, and secret lifecycle governance processes.
• Automate security validation across source code, Terraform, containers, dependencies, and deployment pipelines.
• Release security controls as code with peer review, automated testing, operational validation, and documented exceptions.

Must Have Skills-

• Cloud Security
• Google Kubernetes Engine (GKE)