Key Responsibilities-
Implement identity, secrets, posture, supply-chain, and auditable release controls across Google Cloud platforms and agent delivery workflows.
Skill Requirements-
* Design enterprise IAM architectures for users, workloads, applications, agents, and delivery pipelines.
* Implement Workload Identity Federation and GKE Workload Identity to eliminate long-lived credentials.
* Develop Secret Manager lifecycle management, including storage, access control, rotation, auditing, and consumption.
* Design Cloud KMS architectures supporting encryption, signing, rotation, and key governance.
* Implement Terraform-based security baselines, organization policies, IAM controls, and compliance guardrails.
* Secure Cloud Build, GitLab, APIs, webhooks, connectors, and service-to-service communication.
* Build software supply-chain security controls, including SBOM generation, scanning, provenance, and attestations.
* Implement Binary Authorization policies enforcing trusted artifact deployment.
* Operationalize Security Command Center and Artifact Analysis for continuous risk visibility.
* Implement GKE security controls covering RBAC, namespaces, workload identity, admission controls, and network security.
* Secure Agentic AI workloads through authorization, tool governance, approval workflows, and audit controls.
* Design enterprise logging, SIEM integrations, evidence collection, compliance reporting, and forensic readiness.
* Implement key, token, certificate, and secret lifecycle governance processes.
* Automate security validation across source code, Terraform, containers, dependencies, and deployment pipelines.
* Release security controls as code with peer review, automated testing, operational validation, and documented exceptions.
Must Have Skills-
* Cloud Security
* Google Kubernetes Engine (GKE)
