> Markdown version of [/jobs/ext/3884386-associate-senior-gcp-security-engineer](https://www.wearedevelopers.com/jobs/ext/3884386-associate-senior-gcp-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Associate - Senior GCP Security Engineer

- **Company:** New York Life Insurance Company
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $124,000.0 - $177,000.0
- **Contract:** Permanent contract
- **Skills:** Training Data, Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Big Data, BigQuery, Cloud Computing, Cloud Computing Security, Computer Networks, Continuous Integration, Elasticsearch, Identity and Access Management, Intrusion Detection and Prevention, Lightweight Directory Access Protocols (LDAP), Ping Identity, Security Information and Event Management, Systems Integration, Policy as Code, Google Cloud, Software Modules, Data Ingestion, Cyberark, Retrieval-Augmented Generation, Large Language Models, Multi-Cloud, National Institute of Standards and Technology Cybersecurity Framework, Kubernetes, Infrastructure Automation Frameworks, Machine Learning Operations, Virtual Agents, CIS Benchmarks, Google Gemini, SailPoint, Terraform, Service Stack
- **Published:** October 23, 2026
- **Apply:** https://www.builtincolorado.com/job/senior-associate-senior-ai-platform-security-engineer/9604425?handler=ApplyRedirect

## About the Role

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices., We are looking for a Senior GCP Security Engineer who lives on GCP and can own the security architecture end-to-end, not just advise on it. You will design guardrails, write Terraform, integrate with Harness CI/CD pipelines, and partner with engineering teams to ensure every resource deployed is secure by default. This role is GCP-first. Familiarity with AWS and Azure is a plus, but your day-to-day will be deep in Google Cloud: securing GKE workloads, governing AI pipelines on Vertex AI, managing identities via ICAM, and using native GCP security services to detect and respond to threats.
What You'll Bring:

 * 5+ years of experience in cloud security, with the majority focused on GCP environments.
 * Deep hands-on experience with GCP security services including IAM, VPC Service Controls, Cloud Armor, KMS, Secret Manager, DLP, and SCC.
 * Strong Elastic SIEM experience including log ingestion, detection engineering, alert management, and threat correlation.
 * Production-level Terraform experience including module development, infrastructure automation, and state management.
 * Experience integrating security controls into CI/CD pipelines using Harness or equivalent platforms.
 * Strong knowledge of Kubernetes and GKE security including pod security admission, network policies, Workload Identity, and Binary Authorization.
 * Hands-on experience with ICAM or enterprise identity platforms governing non-human identities and workload access.
 * Practical knowledge of AI/ML security including Vertex AI workload protection, LLM API governance, and training data security.
 * Proctored technical exam (including code writing, where appropriate) will be required before any offer can be extended
 * In person interview will be required in NY Home Office before any offer can be extended, * Google Professional Cloud Security Engineer or Professional Cloud Architect certification.
 * Experience with policy-as-code tooling such as OPA/Rego, Sentinel, or Checkov.
 * Familiarity with AWS security services including IAM, GuardDuty, SCPs, and multi-cloud security architectures.
 * Experience with Cribl Stream or similar log routing technologies integrated with Elasticsearch.
 * Understanding of compliance-driven security requirements including NY DFS 23 NYCRR 500, NAIC, NIST CSF, CIS Benchmarks, and ISO 27001.
 * Working knowledge of enterprise identity platforms including SailPoint, CyberArk, Ping Identity, Active Directory, and LDAP.
 * Experience securing AI agent frameworks such as LangChain or Vertex AI Agent Builder.

Primary Technology Stack:

 * GCP: Vertex AI, GKE, Cloud Armor, KMS, SCC, DLP, Secret Manager, Certificate Manager, BigQuery, Cloud Run
 * Infrastructure as Code: Terraform (required), Harness CI/CD, ICAM
 * Identity: GCP Workload Identity Federation, service account governance, ICAM, SailPoint, CyberArk, Ping Identity, Active Directory, LDAP
 * AI/ML: Vertex AI Agent Builder, Gemini APIs, BigQuery ML, RAG pipelines
 * Secondary: AWS (IAM, GuardDuty, Bedrock), Azure (familiarity acceptable)
 * Observability: Elastic SIEM (primary), SCC, Cribl Stream, Elasticsearch

## Description

Provides customer and adviser support for investment products, accounts, performance inquiries, and financial processing requests. Maintains expertise in Weathscape and Envestnet, handles escalations, supports processing functions, trains new staff, resolves operational and compliance issues, and improves workflows. The role requires financial industry knowledge, strong customer service skills, Microsoft Office proficiency, and Series 7 licensing or specialized processing expertise.