On behalf of our client, we are seeking a GCP Security Specialist for a contract that will run until the end of 2025 with high probability of extension. Our client requires a consultant with deep expertise in securing Google Cloud Platform (GCP) including data services, APIs & microservices, and AI services.

Here is what you will do on a day to day basis:

• Recommend and implement GCP security services for GCP , including:
• Network Security: Cloud Armor for internet-facing services, VPC peering/Private Service Connect for secure hybrid connectivity.
• IAM: Architect and implement secure authentication and authorization mechanisms using Microsoft Identities (Azure AD) for accessing GCP data and services achieving SSO. Or appropriate cross cloud integration authorization capability. Familiarity with the Saviynt IAM platform is an asset.
• Data Protection: Encryption, DLP for data at rest and in transit, especially during cross-cloud integration.
• API Security: Secure API design and implementation for data exchange, microservices and API gateways.
• Security Analytics: Configure GCP to export relevant security logs and telemetry (e.g., Cloud Audit Logs, VPC Flow Logs, Firewall Rules Logs) into Microsoft Sentinel. Fine tune log sources to minimize cost while not sacrificing security telemetry data
• Secret Management: Develop and design solutions for cross cloud secret/key vault management
• Evaluate the security implications and potential shortcomings of prioritizing Microsoft Identity and Sentinel over native GCP security tools.
• Provide expert recommendations on how to best leverage their existing Microsoft investments while addressing any security gaps and ensuring a robust overall security posture for the GCP.
• Recommend and implement GCP security services as needed to complement the Microsoft-centric approach.
• Document the implemented security architecture, integration processes, and any identified risks or limitations.
• Collaborate closely with our identity management, security operations, and data teams.

Here is the type of person we are looking for:

• Minimum 5+ years of hands-on experience securing Google Cloud Platform (GCP).
• Proven expertise in integrating Microsoft Entra ID for SSO with GCP services.
• Experience with multi-cloud security implementations
• Deep understanding of configuring GCP to export security logs to external SIEM systems, specifically Microsoft Sentinel.
• Ability to identify and articulate the pros and cons of prioritizing Microsoft security tools within GCP.
• Excellent understanding of authentication and authorization protocols (e.g., OAuth 2.0, SAML).
• Strong troubleshooting and analytical skills in hybrid cloud environments.
• Relevant GCP and Azure security certifications.
• Experience with Entra ID Conditional Access policies in the context of GCP access.
• Knowledge of Google's native security tools (e.g., Google Identity Management, Security Command Center, Chronicle) and their potential benefits.
• Proficiency with Terraform is an asset.
• Excellent communication and collaboration skills, particularly with identity and security operations teams.
• Strong analytical and problem-solving abilities in complex hybrid cloud scenarios.
• Ability to provide objective and well-reasoned recommendations.
• Proactive approach to identifying and mitigating security risks.

If you are interested in exploring this position, please apply now!

Our client is an equal opportunity employer and values diversity at their company

People are our passion. People are our profession.

Since 2010, SIGnature Recruiting has been pairing exceptional people with short-term contracts and long-term careers in Vancouver’s flourishing IT industry. We are specialists in IT Recruiting and pride ourselves in making valuable contributions to our clients and candidates.