Cloud Network Security Engineer (GCP Cloud NetSec)

Job Description

About You

You are a Cloud Network Security Engineer who designs, implements, automates, and operates network security architecture on Google Cloud Platform (GCP). You combine a solid foundation in corporate networking and firewalls with hands-on GCP security expertise to secure connectivity and mitigate data exfiltration risks.

You thrive in environments where security, compliance, and collaboration are highly valued. You are detail-oriented, work closely with infrastructure and DevOps teams, and keep the platform aligned with internal regulations and CIS Benchmarks.

• Note: This position is offered under a 3-month assignment (with the possibility of extension) and follows a hybrid model , with 3 to 4 days per week on-site and 1 to 2 days remote, Monday through Friday.

You Bring to Applaudo the Following Competencies:

• Bachelor’s Degree in Computer Science, Information Systems, or a related field is desired, or equivalent professional experience.
• 2+ years of experience in networking, cybersecurity, and corporate firewalls.
• 1+ year of hands-on experience with network and security services in GCP .
• Working knowledge of GCP security services, including VPC, Cloud Armor, IAP, VPC Service Controls, Cloud Interconnect, Security Command Center (SCC), and Cloud KMS .
• Working knowledge of Terraform , including IaC reviews and network module development.
• Ability to collaborate with infrastructure and DevOps teams.
• Working knowledge of English is required; Spanish will be the primary language of communication within the project.
• Google Associate Cloud Engineer and/or Google Professional Cloud Security Engineer certifications are desired.
• Nice to have experience with Cloud IDS, Certificate Authority Service, and Secret Manager , as well as CIS Benchmarks for GCP compliance and auditing.

You Will Be Accountable for the Following Responsibilities:

• Design, implement, automate, and operate the network security architecture in GCP.
• Secure the perimeter using Cloud Armor (WAF), hierarchical VPC firewall policies, and VPC Service Controls.
• Implement hybrid connectivity through HA VPN and Cloud Interconnect, along with Cloud DNS, Cloud NAT, and Load Balancing with IAP under a Zero Trust approach.
• Review Terraform code to prevent insecure configurations and build secure network modules.
• Monitor network activity with VPC Flow Logs, Cloud Logging, and Cloud Monitoring, and manage threats with SCC and Cloud IDS.
• Manage encryption with Cloud KMS and Secret Manager, and certificates with CA Service.
• Ensure compliance with CIS Benchmarks for GCP and internal regulations.
• Collaborate with infrastructure and DevOps teams to mitigate data exfiltration risks.

Qualifications

• 2+ years of experience in networking, cybersecurity, and corporate firewalls .
• 1+ year of hands-on experience with GCP network and security .
• Experience with VPC, Cloud Armor, IAP, VPC-SC, Interconnect, SCC, and KMS .
• Working knowledge of Terraform for network modules and IaC reviews.

Additional Information

About Us

We Are Engineered Different.

At Applaudo, talented people design, build, and scale meaningful, AI-powered solutions that create real business impact. As an AI-native organization, we collaborate across design, development, cloud, data, and artificial intelligence to turn ideas into scalable products that transform how companies operate, make decisions, and grow.

We are building a high-performance culture grounded in five values: Empowering Excellence, Collaborative Teamwork, Unsolicited Respect, Consistent Transparency, and Efficient Communication . These define how we work, how we support one another, and how we hold ourselves accountable.

Applaudo is a place for people who want to learn fast, take ownership, and work alongside strong teams they are proud to belong to. Joining us means being part of an organization that is evolving intentionally, investing in modern ways of working, and leading AI-native transformation at scale.