Cloud Security / Identity & Secrets Engineer Sunnyvale - CA - California

Key Responsibilities-

Implement identity, secrets, posture, supply-chain, and auditable release controls across Google Cloud platforms and agent delivery workflows.

Skill Requirements-

* Design enterprise IAM architectures for users, workloads, applications, agents, and delivery pipelines.

* Implement Workload Identity Federation and GKE Workload Identity to eliminate long-lived credentials.

* Develop Secret Manager lifecycle management, including storage, access control, rotation, auditing, and consumption.

* Design Cloud KMS architectures supporting encryption, signing, rotation, and key governance.

* Implement Terraform-based security baselines, organization policies, IAM controls, and compliance guardrails.

* Secure Cloud Build, GitLab, APIs, webhooks, connectors, and service-to-service communication.

* Build software supply-chain security controls, including SBOM generation, scanning, provenance, and attestations.

* Implement Binary Authorization policies enforcing trusted artifact deployment.

* Operationalize Security Command Center and Artifact Analysis for continuous risk visibility.

* Implement GKE security controls covering RBAC, namespaces, workload identity, admission controls, and network security.

* Secure Agentic AI workloads through authorization, tool governance, approval workflows, and audit controls.

* Design enterprise logging, SIEM integrations, evidence collection, compliance reporting, and forensic readiness.

* Implement key, token, certificate, and secret lifecycle governance processes.

* Automate security validation across source code, Terraform, containers, dependencies, and deployment pipelines.

* Release security controls as code with peer review, automated testing, operational validation, and documented exceptions.

Must Have Skills-

* Cloud Security

* Google Kubernetes Engine (GKE)