Our client, a IT Services and Consulting company, is looking for a GCP Cloud Security Specialist – Data & AI Security for their Phoenix, AZ/Hybrid location.
Responsibilities:
Assess the end-to-end architecture from a data security and privacy standpoint.
Review data flows across:
GCP service projects
Virtual agents / conversational AI
Telephony platforms
API proxies
Datastore, BigQuery, Cloud Storage
On-prem / Amex systems of record
Identify risks related to:
Customer data exposure
PII handling
Authentication and authorization
Encryption in transit and at rest
Secrets and key management
Logging, monitoring, and auditability
Data retention and deletion
Cross-boundary data movement
Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
Implement Sentinel policies for enforcing encryption standards.
Implement database activity monitoring and blocking rules in GCP.
Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
Produce findings report with risk ratings, gaps, and remediation recommendations.
Requirements:
Strong experience in cloud security architecture, preferably Google Cloud Platform.
Hands-on knowledge of:
GCP IAM
VPC / Shared VPC
Cloud Run / GKE
BigQuery
Cloud Storage
Datastore / Firestore
Cloud KMS / Secret Manager
Experience assessing data protection controls for PII, PCI, or regulated customer data.
Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.
Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects.
Understanding of logging, SIEM integration, audit trails, and security monitoring.
Experience with threat modeling and architecture risk reviews.
Preferred Skills
Experience with conversational AI / virtual agent platforms.
Knowledge of telephony/SIP integrations and contact center platforms.
Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.
Familiarity with AI data governance, model safety, and GenAI security risks.
Cloud Security Architecture (GCP Focus): Strong expertise in designing and assessing cloud security architectures, specifically within Google Cloud Platform.
GCP Security & Infrastructure Controls: Hands-on experience with core GCP security and data tools, including IAM, VPC / Shared VPC, Cloud Run/GKE, BigQuery, Cloud Storage, Datastore/Firestore, and Cloud KMS / Secret Manager.
Data Protection & Compliance: Demonstrated experience assessing data protection controls for sensitive and regulated customer data, including PII and PCI.
ICONMA is a global information consulting management firm providing Professional Staffing Services and Project-Based Solutions for organizations in a broad range of industries.
Corporate Headquarters in Troy, Michigan; 20+ locations worldwide.
Certified Woman-Owned Business Enterprise (WBE); certified by Women’s Business Enterprise National Council, National Women Business Owners Corporation (NWBOC); and California Public Utilities Commission (CPUC).
Founded in 2000
2000+ Employees
The company was founded on the principle that success is derived from delivering high quality service and resources in the most responsive, flexible, and innovative way. ICONMA invests in people and resources with a single goal: To provide our customers with the highest quality service in the most responsive manner. Through its network of offices, ICONMA provides the resources to help clients maintain their competitive advantage.
Skills
Application Programming Interface (API)unmatched
Architectural Analysisunmatched
Artificial Intelligence (AI)unmatched
Artificial Intelligence (AI) Agentsunmatched
Authenticationunmatched
Call Center Integrationunmatched
Cloud Architectureunmatched
Cloud Computingunmatched
Cloud Storageunmatched
Cryptographyunmatched
Customer/Client Researchunmatched
Data Analysisunmatched
Data Modelingunmatched
Financial Servicesunmatched
Firewallsunmatched
GCP (Good Clinical Practices)unmatched
Hardware Virtualizationunmatched
Health Planunmatched
Hybrid Cloudunmatched
ISO (International Organization for Standardization)unmatched
Information Technology Consultingunmatched
Information/Data Security (InfoSec)unmatched
Input/Outputunmatched
Network Securityunmatched
OAuthunmatched
PCIunmatched
PCI-DSSunmatched
Policy Implementationunmatched
Privacy Controlsunmatched
Private Securityunmatched
Reporting Skillsunmatched
Riskunmatched
Risk Analysisunmatched
Risk Modelingunmatched
SIP (Session Initiation Protocol)unmatched
Security Analysisunmatched
Security Architectureunmatched
Security Auditingunmatched
Security Information and Event Management (SIEM)unmatched
Security Infrastructureunmatched
Security Monitoringunmatched
Telephonyunmatched
Threat Modelingunmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
🎯
Be found by employers
5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.