Cloud Security Engineer (GCP & Oracle)

Technologent•Phoenix, AZ

13h•Onsite

About The Position

We are seeking a Cloud Security Engineer (GCP & Oracle) to evaluate and strengthen the security posture of a cloud-native conversational AI ecosystem built on Google Cloud Platform (GCP). This role is centered on assessing data protection, cloud architecture, identity controls, and AI-related security risks across integrated enterprise environments. The ideal candidate will bring deep expertise in cloud security architecture, data protection, and risk assessment while ensuring secure communication between AI services, APIs, telephony platforms, and enterprise backend systems.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related technical discipline.
Minimum 7 years of experience in cloud security architecture, security consulting, or enterprise security assessments.
Strong experience implementing and managing data security controls across Oracle databases and Google Cloud Platform (GCP) environments.
Hands-on experience with Oracle Database Security, including encryption (TDE), data masking, access controls, auditing, privilege management, and security hardening.
Strong expertise in Google Cloud Platform security services and architecture.
Hands-on experience with Google Cloud IAM, Shared VPC, Cloud Run, GKE, BigQuery, Cloud Storage, Firestore/Datastore, Cloud KMS, and Secret Manager.
Experience evaluating security controls for sensitive and regulated data, including PII, PCI, or similar compliance requirements.
Strong understanding of API security principles, including OAuth, mutual TLS (mTLS), secure token management, API gateways, and service authentication.
Knowledge of hybrid cloud networking, firewalls, private connectivity, and secure network segmentation.
Experience reviewing security logging, audit trails, SIEM integrations, and monitoring frameworks.
Strong understanding of threat modeling methodologies and security architecture review processes.
Excellent analytical, documentation, and communication skills.

Nice To Haves

Experience securing conversational AI or virtual assistant platforms.
Oracle Cloud Infrastructure (OCI) security experience.
Familiarity with telephony infrastructure, SIP integrations, or enterprise contact center technologies.
Knowledge of industry security and compliance frameworks such as PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.
Understanding of AI governance, large language model security, prompt injection risks, and GenAI security best practices.
Experience implementing cloud security policies and governance within enterprise-scale Google Cloud environments.

Responsibilities

Perform comprehensive security assessments of cloud-based architectures supporting conversational AI and enterprise applications.
Analyze data movement across cloud services, AI platforms, APIs, telephony systems, storage platforms, and on-premises environments to identify potential security concerns.
Evaluate the effectiveness of controls protecting sensitive customer information throughout the application lifecycle.
Review identity and access management configurations, service accounts, authentication mechanisms, and authorization models within Google Cloud.
Assess encryption strategies for data transmission, storage, and cryptographic key management.
Examine logging, monitoring, and audit capabilities to ensure security visibility and compliance.
Validate network security architecture, including Shared VPCs, segmentation, private connectivity, and hybrid cloud integrations.
Design and implement policy controls to enforce cloud security and encryption standards.
Assess database security configurations and recommend monitoring and protection strategies.
Identify AI-specific security risks related to model interactions, prompt handling, knowledge repositories, and sensitive data exposure.
Conduct architecture risk assessments and deliver actionable recommendations with prioritized remediation plans.
Collaborate with engineering, infrastructure, and security teams to strengthen overall cloud security posture.
Prepare detailed assessment reports outlining security gaps, risk ratings, and mitigation strategies.