Security Engineer WITH GCP

Job Description: Platform Compliance & Security Engineer

• Location: Jersey City, NJ
• Work Arrangement: 100% Onsite (5 days per week)
• Job Type: Contract

 
Role Overview
We are seeking a highly experienced Platform Compliance & Security Engineer to join our team in Jersey City. This role focuses on securing enterprise-scale Google Cloud Platform (GCP) environments, ensuring stringent data protection, and automating security infrastructure. The ideal candidate will bring a strong background in Infrastructure-as-Code (Terraform), cloud-native security controls, and Python scripting to drive compliance and safeguard sensitive data.

Key Responsibilities

• Design, implement, and manage security controls within Google Cloud Platform (GCP) environments.
• Develop and maintain Infrastructure-as-Code (IaC) using Terraform to ensure secure and compliant cloud deployments.
• Write and deploy Python scripts to automate security monitoring, compliance checks, and threat remediation.
• Administer and monitor the GCP Security Command Center to identify, investigate, and mitigate vulnerabilities and threats.
• Implement robust data protection strategies, including data sensitivity mapping, data categorization, and access controls.
• Manage encryption and decryption workflows, including enterprise Key Management lifecycle operations.
• Collaborate with cross-functional infrastructure and engineering teams to embed security best practices throughout the platform lifecycle.

Required Qualifications (Primary Skills)

• 8 to 14 years of overall professional experience in IT, Cloud, or Cybersecurity.
• Deep, hands-on experience securing Google Cloud Platform (GCP) infrastructure.
• Strong proficiency in Python for automation, integration, and security scripting.
• Extensive experience with Terraform Security, specifically enforcing security policies and compliance within IaC pipelines.
• Ability to work 100% onsite (5 days a week) in Jersey City.

Preferred & Secondary Skills

• Hands-on experience configuring and managing GCP Security Command Center.
• Strong understanding of Encryption / Decryption methodologies and Key Management systems.
• Expertise in Data Protection, Data Sensitivity, and Data Categorization within highly regulated enterprise environments.