Platform Compliance & Security Engineer

Function: Platform Compliance & Security

Primary Skillset: Google Cloud Platform, Python, Terraform, Security

Must-Have Skills

Deep hands-on experience with Google Cloud Platform security services including Cloud KMS, Security Command Center, Cloud DLP, VPC Service Controls, Cloud Armor, Binary Authorization, and Chronicle.

Strong Python skills applied to security automation writing scripts for compliance checks, DLP policy enforcement, auto-remediation, and integrating Google Cloud Platform APIs for security event processing.

Proven ability to write secure Terraform configurations, enforce security policies via code, and integrate static analysis tools (tfsec, Checkov) into CI/CD pipelines for Google Cloud Platform deployments.

In-depth knowledge of symmetric/asymmetric encryption, Google Cloud Platform Cloud KMS key hierarchies, CMEK/CSEK implementation, envelope encryption patterns, and HSM-backed key operations.

Hands-on experience with Cloud DLP for sensitive data discovery, classification schema design (PII/PCI/PHI), data masking/tokenization techniques, and enforcement of data handling policies.

Working knowledge of CIS Google Cloud Platform Benchmarks, NIST 800-53, ISO 27001, SOC 2 Type II, PCI-DSS, and GDPR requirements as they apply to cloud infrastructure and data management practices.

Expertise in Google Cloud Platform IAM design, service account management, Workload Identity Federation, Organization Policy constraints, and implementing least-privilege access models at scale.