Security Architect

About the role

Lumenalta is looking for an experienced Security Architect to lead the security design of a high‑stakes Google Cloud Platform (GCP) engagement. This senior, hands‑on position focuses on building a robust, multi‑tenant cloud security posture and guiding formal security reviews.

Key responsibilities

• Design and enforce GCP security controls, including VPC Service Controls, Credential Access Boundaries, and least‑privilege IAM policies across multi‑tenant environments.
• Conduct penetration testing to validate tenant boundaries, API manipulation, privilege escalation, and lateral movement scenarios.
• Lead threat modeling and architectural security reviews, producing risk assessments and remediation plans.
• Validate identity propagation and ensure tenant isolation throughout the architecture.
• Implement DLP controls, data retention policies, and compliance/audit frameworks aligned with regulatory requirements.
• Defend architectural decisions in formal security checkpoints, communicating mitigations and residual risk.
• Manage operational security controls, risk frameworks, and InfoSec governance to protect data confidentiality, integrity, and availability.
• Identify emerging threats and apply advanced detection technologies and governance countermeasures.
• Collaborate with engineering and product teams to embed security requirements from design through delivery.

Required profile

• 7+ years of experience in cybersecurity or cloud security architecture.
• Proven ownership of security design in production multi‑tenant environments at scale.
• Deep hands‑on expertise with GCP security primitives.
• Strong ability to write threat models, perform penetration testing, and present to security review panels.

Required skills

• Google Cloud Platform (GCP)
• VPC Service Controls
• Credential Access Boundaries
• IAM (least‑privilege policies)
• Penetration testing
• Threat modeling
• Data Loss Prevention (DLP) controls
• Compliance and audit frameworks
• InfoSec governance
• Advanced detection technologies