GCP Security Engineer with Italian/French

• Proven experience securing GCP enterprise environments, including Cloud Identity and IAM.
• Hands-on expertise with VPC Service Controls, IAP, Cloud Armor, Cloud Firewall, and Cloud DNS Security.
• Strong proficiency with Terraform (IaC), Linux/Unix administration, and scripting in Python or Bash.
• Deep understanding of cloud security, network segmentation, and zero-trust principles.
• Strong communication skills for direct, international client collaboration.

Nice to have:

• DevSecOps pipeline integration and advanced GCP networking (VPCs, Interconnect, VPN).
• Experience in IT consulting or client-facing delivery roles.
• Relevant certifications: GCP Professional Cloud Security Engineer, CISSP, or CCSP.
• Knowledge of compliance frameworks (ISO 27001, NIST, DORA) or fluency in Italian or French.

• Design, implement, and optimize enterprise security architectures within Google Cloud Platform (GCP).
• Lead security assessments and deliver recommendations aligned with cloud security best practices and compliance frameworks.
• Configure and manage native GCP security controls: Cloud Armor, Cloud Firewall, VPC Service Controls (VPC SC), Identity-Aware Proxy (IAP), Cloud DNS Security, and Cloud Identity.
• Develop and maintain Infrastructure as Code (IaC) modules using Terraform for secure, repeatable cloud deployments.
• Collaborate with customer infrastructure, networking, security, and application teams to implement security measures.
• Integrate security controls into CI/CD pipelines and DevSecOps workflows.
• Execute security hardening, threat monitoring, and risk mitigation across cloud environments.
• Troubleshoot cloud networking, identity, and access management issues.
• Provide technical guidance, architecture reviews, and knowledge transfer to customer stakeholders during remote and on-site workshops.
• Conduct end-to-end third-party security risk assessments for suppliers, SaaS, cloud services, and OT solutions by evaluating technical documentation, SOC 2/ISO reports, and security evidence.
• Advise Procurement, Legal, and Compliance teams on vendor risks during onboarding and lifecycle management in alignment with internal security policies.
• Discuss security posture and non-compliance directly with suppliers, and define actionable risk-remediation plans.
• Improve third-party risk management frameworks, methodologies, and workflows in alignment with emerging cyber threats and regulatory requirements.