Cloud Data Security Consultant

Shree Narayani Networking Solutions • Phoenix, AZ

2d • Hybrid

About The Position

We are seeking a Cloud Data Security Consultant to assess the end-to-end architecture from a data security and privacy standpoint. This role involves reviewing data flows across various GCP services, virtual agents, telephony platforms, API proxies, datastores, and on-prem systems. You will identify risks related to customer data exposure, PII handling, authentication, authorization, encryption, secrets management, logging, monitoring, auditability, data retention, deletion, and cross-boundary data movement. The consultant will also review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation, and implement Sentinel policies for encryption standards and database activity monitoring.

Requirements

• Strong experience in cloud security architecture, preferably Google Cloud Platform.
• Hands-on knowledge of GCP IAM, VPC / Shared VPC, Cloud Run / GKE, BigQuery, Cloud Storage, Datastore / Firestore, Cloud KMS / Secret Manager.
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.
• Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects.
• Understanding of logging, SIEM integration, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.
• GCP
• Sentinel
• Terraform
• VPC
• IAM

Responsibilities

• Assess the end-to-end architecture from a data security and privacy standpoint.
• Review data flows across GCP service projects, virtual agents / conversational AI, telephony platforms, API proxies, Datastore, BigQuery, Cloud Storage, and On-prem / Amex systems of record.
• Identify risks related to customer data exposure, PII handling, authentication and authorization, encryption in transit and at rest, secrets and key management, logging, monitoring, and auditability, data retention and deletion, and cross-boundary data movement.
• Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies for enforcing encryption standards.
• Implement database activity monitoring and blocking rules in GCP.
• Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
• Produce findings report with risk ratings, gaps, and remediation recommendations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed