Cloud Network Security Engineer (GCP Cloud NetSec)

About You

You are a Cloud Network Security Engineer who designs, implements, automates, and operates network security architecture on Google Cloud Platform (GCP). You combine a solid foundation in corporate networking and firewalls with hands-on GCP security expertise to secure connectivity and mitigate data exfiltration risks.

You thrive in environments where security, compliance, and collaboration are highly valued. You are detail-oriented, work closely with infrastructure and DevOps teams, and keep the platform aligned with internal regulations and CIS Benchmarks.

Responsibilities

Design, implement, automate, and operate the network security architecture in GCP.; Secure the perimeter using Cloud Armor (WAF), hierarchical VPC firewall policies, and VPC Service Controls.; Implement hybrid connectivity through HA VPN and Cloud Interconnect, along with Cloud DNS, Cloud NAT, and Load Balancing with IAP under a Zero Trust approach.; Review Terraform code to prevent insecure configurations and build secure network modules.; Monitor network activity with VPC Flow Logs, Cloud Logging, and Cloud Monitoring, and manage threats with SCC and Cloud IDS.; Manage encryption with Cloud KMS and Secret Manager, and certificates with CA Service.; Ensure compliance with CIS Benchmarks for GCP and internal regulations.; Collaborate with infrastructure and DevOps teams to mitigate data exfiltration risks.

Requirements

Note: This position is offered under a 3-month assignment (with the possibility of extension) and follows a hybrid model , with 3 to 4 days per week on-site and 1 to 2 days remote, Monday through Friday.; Bachelor’s Degree in Computer Science, Information Systems, or a related field is desired, or equivalent professional experience.; 2+ years of experience in networking, cybersecurity, and corporate firewalls.; 1+ year of hands-on experience with network and security services in GCP .; Working knowledge of GCP security services, including VPC, Cloud Armor, IAP, VPC Service Controls, Cloud Interconnect, Security Command Center (SCC), and Cloud KMS .; Working knowledge of Terraform , including IaC reviews and network module development.; Ability to collaborate with infrastructure and DevOps teams.; Working knowledge of English is required, Spanish will be the primary language of communication within the project.; Google Associate Cloud Engineer and/or Google Professional Cloud Security Engineer certifications are desired.; Nice to have experience with Cloud IDS, Certificate Authority Service, and Secret Manager , as well as CIS Benchmarks for GCP compliance and auditing.; 1+ year of hands-on experience with GCP network and security .; Experience with VPC, Cloud Armor, IAP, VPC-SC, Interconnect, SCC, and KMS .; Working knowledge of Terraform for network modules and IaC reviews.