BSG is looking for a Senior GCP Cloud Security Architect to join an international cloud transformation project.

We are seeking a senior professional who can take ownership of the security architecture for a new GCP-based platform, driving a Secure by Design approach and guiding implementation from architecture definition through rollout.

The role involves working in an international environment, collaborating with cross-functional teams, technical experts, and senior stakeholders.

The Mission:

Design and own the security architecture of a new GCP-based platform, covering Kubernetes, Identity & Access Management, network security, CI/CD, and secrets management.

Act as the technical reference for the team, providing architectural guidance and supporting implementation from design through rollout.

Key Responsibilities:

- Define the target GCP security architecture, including landing zones, organization/folder/project structure, security guardrails, organizational policies, IAM, and policy-as-code.
- Design IAM/PAM solutions based on least-privilege principles, workload identity, service accounts, privileged and break-glass access, and access reviews.
- Define GKE/Kubernetes security standards, covering RBAC, network policies, admission control, workload identity, and container/supply-chain security.
- Design secure network architectures, including VPC, segmentation, hybrid connectivity, ingress/egress, and WAF/DDoS protection.
- Embed security into CI/CD pipelines through DevSecOps practices, including SAST/DAST, IaC and secrets scanning, least-privilege pipeline identities,



and secure Terraform implementations.
- Define secrets, encryption key, and certificate management architectures using Google Cloud services such as Secret Manager and Cloud KMS.
- Advise senior stakeholders on security risks, architectural trade-offs, remediation roadmaps, compliance requirements, and incident readiness.

Must-have Experience:

- 8+ years of experience in Cloud Security Architecture, including hands-on expertise with Google Cloud Platform (GCP).
- Strong knowledge of GCP services, including IAM, VPC, KMS, Security Command Center, and GKE.
- Proven expertise in Kubernetes security, including RBAC, network policies, and container/supply-chain security.
- Enterprise-level IAM/PAM architecture and implementation experience.
- Experience securing CI/CD and Infrastructure as Code pipelines (Terraform or equivalent).
- Familiarity with ISO 27001, NIST CSF, or CIS Benchmarks.
- Fluent English (written and spoken) is mandatory, with excellent communication skills and the ability to interact confidently with international stakeholders, senior management, and technical teams.

Nice to Have:

- Google Professional Cloud Security Engineer or Cloud Architect certification.
- CISSP, CCSP, or CISM certifications.
- CKS (Certified Kubernetes Security Specialist).
- Experience in regulated environments, critical infrastructure, or the energy sector.

Compensation & Contract Type:

- Permanent employment: RAL €65,000–€75,000, depending on experience and seniority.
- Freelance (Partita IVA): Compensation to be agreed based on experience and availability.

📌 Senior GCP Cloud Security Architect (Italia)
🏢 BSG
📍 Italia