14 Sep
GCP Security Engineer
Vacancy expired!
Role: GCP - Cloud Security Engineer Location: Remote Duration: 6 monthNotes:
- Currently just a contract so need someone who can mentor and share knowledge with the team
- Definitely needs to be high level SME specific to GCP with a focus in security
- Currently have Pivotal on prem
- AWS for call center as a service
- Goal is for everything to be on GCP within 4-5 years
- Doesn't need to have healthcare industry experience, just need to know how to protect data on the cloud
- Needs to be "geeky" but also can collab and teach
- Understanding and experience of Security, Privacy and Compliance within the GCP environment
- Experience with Hashicorp Terraform Enterprise, Vault Enterprise and Sentinel
- Experience with Jenkins, Bitbucket, python and JIRA
- Experience configuring Google Security Command Center
- Good understanding of GCP organizations, folders, projects and roles
- Good understanding of GCP security framework, audit and logging
- Understanding of Hipaa and HiTrust
- GCP Cloud knowledge with security and securing data
- Palo Alto - Prisma specifically will be used
- Containerization tools: Kubernetes
- Data Lakes experience is nice to have
- Help define on-going cloud security control strategy (strategic & tactical)
- Define configuration standards and processes for cloud security controls and technology; ensure documentation is updated as needed and at least once annually
- Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to cloud computing environments.
- Develop and maintain security control metrics and reporting
- Provide security consulting to internal project teams and departments regarding security standards and requirements
- Evaluate various cloud security controls or other technologies for possible application to enhance security of environments and data
- Drive process and tool efficiencies, enabling security team members to work on more advanced tasks
- May provide mentoring and coaching to team members on security control technology and best practices in areas where role serves as a SME
- Other duties as assigned
Vacancy expired!