Cloud Security Lead Architect

Cloud Security Lead Architect (GCP)

We are seeking an experienced Cloud Security Lead Architect to lead the design and governance of enterprise-wide cloud security architecture across Google Cloud Platform (GCP). This role will be responsible for defining security standards, reference architectures, and governance frameworks that ensure consistent implementation of security controls across network, identity, workload, data, and cloud infrastructure.

Working closely with Enterprise Architecture, Cloud Engineering, DevSecOps, and Security teams, you will drive the adoption of scalable security patterns while balancing risk reduction with business agility.

Key Responsibilities

• Define and own enterprise cloud security architecture across Google Cloud Platform (GCP).
• Develop security reference architectures, standards, and design patterns for cloud platforms.
• Establish security guardrails and governance frameworks to ensure consistent security implementation across cloud environments.
• Provide architectural oversight across identity, network, workload, data, and infrastructure security domains.
• Collaborate with engineering and delivery teams to embed secure-by-design principles into cloud initiatives.
• Lead architecture reviews and provide guidance on security best practices for new cloud services and applications.
• Design and implement cloud security controls covering IAM, encryption, network segmentation, logging, monitoring, and threat detection.
• Ensure cloud solutions align with enterprise security policies, regulatory requirements, and industry frameworks.
• Partner with GRC and risk teams to assess security risks and recommend appropriate mitigation strategies.
• Act as the technical authority for cloud security architecture, supporting stakeholders across multiple business units.

Required Skills & Experience

• Extensive experience in Cloud Security Architecture within large enterprise environments.
• Experience designing enterprise security architectures across identity, network, workload, data, and platform security.
• Strong understanding of Zero Trust architecture and cloud security best practices.
• Experience implementing cloud governance frameworks and security guardrails.
• Knowledge of Infrastructure as Code (Terraform or similar) and DevSecOps practices.
• Experience working with CSPM platforms such as Wiz is highly desirable.
• Familiarity with security frameworks including NIST, ISO 27001, CIS Controls, and GDPR.
• Excellent stakeholder management skills with the ability to communicate security architecture to both technical and non-technical audiences.