Security Architect – Cloud (GCP)

About the role

Lumenalta is looking for an experienced Security Architect with deep cloud security expertise to join a high‑stakes GCP platform engagement. This senior, hands‑on position will design, validate, and defend the security posture of a multi‑tenant cloud architecture.

Key responsibilities

• Design and enforce GCP security controls, including VPC Service Controls, Credential Access Boundaries, and least‑privilege IAM policies across multi‑tenant environments.
• Conduct penetration testing focused on tenant boundary validation, API manipulation, privilege escalation, and lateral movement.
• Lead threat modeling and architectural security reviews, producing risk assessments and remediation plans.
• Validate identity propagation and tenant isolation throughout the architecture.
• Implement DLP controls, data retention policies, and compliance/audit frameworks aligned with regulatory requirements.
• Defend architectural decisions in formal security review panels, clearly communicating mitigations and residual risk.
• Manage operational security controls, risk frameworks, and InfoSec governance to ensure confidentiality, integrity, and availability of data assets.
• Collaborate with engineering and product teams to embed security requirements from design through delivery.

Required profile

• 7+ years of experience in cybersecurity or cloud security architecture, with a proven record of securing production multi‑tenant environments at scale.
• Deep hands‑on expertise with Google Cloud Platform security primitives.
• Ability to write threat models, perform penetration testing, and present findings to senior security stakeholders.

Required skills

• Google Cloud Platform (GCP)
• VPC Service Controls
• Credential Access Boundaries (CAB)
• IAM policy design
• Penetration testing
• Threat modeling
• Data Loss Prevention (DLP) controls
• Compliance and audit frameworks
• InfoSec governance