Haystack
← Back to Jobs
Technology
TETekfortune Inc. logo

Cloud Security / Identity & Secrets Engineer

Tekfortune Inc.Sunnyvale, CA🇺🇸United StatesPosted Oct 16, 2026

Quick Overview

Seniority
Mid Senior
Work mode
On Site
Location
Sunnyvale, CA, United States
Posted
23 hours ago
EncryptionGoogle CloudKubernetesTerraform

Job Description

Job Title:               Cloud Security / Identity & Secrets Engineer
Hiring Mode:      Contract -TP
Location:              Sunnyvale, CA [ONSITE]
 
Note: Client is not willing to sponsor any visa.   
Mandatory Skills: Cloud Security, Google Kubernetes Engine (GKE)

 
Job Description:
Key Responsibilities-
Implement identity, secrets, posture, supply-chain, and auditable release controls across Google Cloud platforms and agent delivery workflows.
Skill Requirements-
  • Design enterprise IAM architectures for users, workloads, applications, agents, and delivery pipelines.
  • Implement Workload Identity Federation and GKE Workload Identity to eliminate long-lived credentials.
  • Develop Secret Manager lifecycle management, including storage, access control, rotation, auditing, and consumption.
  • Design Cloud KMS architectures supporting encryption, signing, rotation, and key governance.
  • Implement Terraform-based security baselines, organization policies, IAM controls, and compliance guardrails.
  • Secure Cloud Build, GitLab, APIs, webhooks, connectors, and service-to-service communication.
  • Build software supply-chain security controls, including SBOM generation, scanning, provenance, and attestations.
  • Implement Binary Authorization policies enforcing trusted artifact deployment.
  • Operationalize Security Command Center and Artifact Analysis for continuous risk visibility.
  • Implement GKE security controls covering RBAC, namespaces, workload identity, admission controls, and network security.
  • Secure Agentic AI workloads through authorization, tool governance, approval workflows, and audit controls.
  • Design enterprise logging, SIEM integrations, evidence collection, compliance reporting, and forensic readiness.
  • Implement key, token, certificate, and secret lifecycle governance processes.
  • Automate security validation across source code, Terraform, containers, dependencies, and deployment pipelines.
  • Release security controls as code with peer review, automated testing, operational validation, and documented exceptions.
Must Have Skills-
  • Cloud Security
  • Google Kubernetes Engine (GKE)

Similar jobs

Browse related jobs

Apply