BSG is looking for a Senior GCP Cloud Security Architect to join an international cloud transformation project. We are seeking a senior professional who can take ownership of the security architecture for a new GCP-based platform, driving a Secure by Design approach and guiding implementation from architecture definition through rollout. The role involves working in an international environment, collaborating with cross-functional teams, technical experts, and senior stakeholders. The Mission: Design and own the security architecture of a new GCP-based platform, covering Kubernetes, Identity & Access Management, network security, CI/CD, and secrets management. Act as the technical reference for the team, providing architectural guidance and supporting implementation from design through rollout.

Key Responsibilities
• Define the target GCP security architecture, including landing zones, organization/folder/project structure, security guardrails, organizational policies, IAM, and policy-as-code.
• Design IAM/PAM solutions based on least-privilege principles, workload identity, service accounts, privileged and break-glass access, and access reviews.
• Define GKE/Kubernetes security standards, covering RBAC, network policies, admission control, workload identity, and container/supply-chain security.
• Design secure network architectures, including VPC, segmentation, hybrid connectivity, ingress/egress, and WAF/DDoS protection.
• Embed security into CI/CD pipelines through DevSecOps practices, including SAST/DAST, IaC and secrets scanning, least-privilege pipeline identities, and secure Terraform implementations.




• Define secrets, encryption key, and certificate management architectures using Google Cloud services such as Secret Manager and Cloud KMS.
• Advise senior stakeholders on security risks, architectural trade-offs, remediation roadmaps, compliance requirements, and incident readiness. Must-have

Experience:
• 8+ years of experience in Cloud Security Architecture, including hands-on expertise with Google Cloud Platform (GCP).
• Strong knowledge of GCP services, including IAM, VPC, KMS, Security Command Center, and GKE.
• Proven expertise in Kubernetes security, including RBAC, network policies, and container/supply-chain security.
• Enterprise-level IAM/PAM architecture and implementation experience.
• Experience securing CI/CD and Infrastructure as Code pipelines (Terraform or equivalent).
• Familiarity with ISO 27001, NIST CSF, or CIS Benchmarks.
• Fluent English (written and spoken) is mandatory, with excellent communication skills and the ability to interact confidently with international stakeholders, senior management, and technical teams. Nice to Have:
• Google Professional Cloud Security Engineer or Cloud Architect certification.
• CISSP, CCSP, or CISM certifications.
• CKS (Certified Kubernetes Security Specialist).
• Experience in regulated environments, critical infrastructure, or the energy sector. Compensation & Contract Type:
• Permanent employment: RAL €65,000–€75,000, depending on experience and seniority.
• Freelance (Partita IVA): Compensation to be agreed based on experience and availability.

📌 Senior GCP Cloud Security Architect (Italia)
🏢 BSG
📍 Italia