GCP Cloud Security Engineer — Zero Trust, Chronicle, IAM & GKE

Cybersecurity · 2025

GCP Zero-Trust Architecture with Cloud Armor

I designed and deployed a production-grade zero-trust security architecture on GCP — identity-first, policy-driven access controls across every service boundary, with no implicit trust for any user, device, or service.

Cybersecurity · 2024

Cloud SIEM: GCP + Chronicle Security Operations

I designed and deployed a cloud-native SIEM environment using Google Chronicle — complete log ingestion pipeline, 14 custom YARA-L detection rules, automated incident triage, and a documented incident response playbook.

DevSecOps · 2025

Kubernetes Security Hardening Playbook

I built a comprehensive GKE security hardening reference implementation — RBAC design, pod security, network segmentation, admission control, and runtime threat detection, all codified in Terraform and Kubernetes manifests.

Cybersecurity · 2025

GCP SCC Custom Findings & Security Posture Management

I deployed GCP Security Command Center Premium and extended it with four custom security findings for organisation-specific threats — plus a security posture dashboard tracking finding resolution over time and a Jira integration for CRITICAL and HIGH findings.

Cybersecurity · 2025

Security Incident Response Automation on GCP

I built an automated incident response system that contains threats, collects evidence, and notifies the right people — all within minutes of an SCC finding, before a human analyst has even opened their laptop.

DevSecOps · 2024

GCP VPC & Firewall Audit Tool

I built an automated GCP VPC and firewall rule auditing tool that scans all projects in an organisation, risk-scores each rule, maps them against security baselines, and produces a prioritised remediation report — what normally takes 3 days takes 15 minutes.

Cybersecurity · 2025

Audit Log Integrity Verification System

I built a cryptographic audit log integrity verification system — using SHA-256 hashing, KMS-signed hash registries, and immutable Cloud Storage to create a tamper-evident audit trail that satisfies HIPAA, ISO 27001, and SOC 2 log integrity requirements.

Cybersecurity · 2025

IAM Access Review Automation

I built a quarterly IAM access review automation system — pulling all IAM bindings across a GCP organisation, risk-scoring access, routing certification tasks to managers, tracking responses, and producing SOC 2 / ISO 27001 audit evidence.

Google Cloud · Jul 2026

Diagnosing Cloud Run Deployments: Build, Revision, IAM and Runtime Failures

A systematic way to isolate Cloud Run failures across source builds, image publication, revision startup, identity and request handling.

Cloud Security · Jul 2026

Debugging 403 Permission Failures in Event-Driven GCP Systems

A principal-first method for resolving 403 errors across Scheduler, Pub/Sub, Cloud Run, Tasks and notification services without over-granting IAM.

Kubernetes Security · Jul 2026

GKE and DevSecOps Supply-Chain Hardening: From Commit to Runtime

Layered controls for source review, dependency scanning, signed images, admission policy, workload identity and runtime detection on GKE.

AI Security Engineering · Jul 2026

Designing an Agentic Security Harness with Tools, Memory and Evolving Skills

Engineering principles for orchestrating security tools and LLM agents while keeping actions bounded, evidence traceable and learned playbooks reviewable.

Cloud Security Audit

I run a comprehensive security posture assessment of your GCP or Azure environment — firewall rules, IAM bindings, org policies, and encryption controls — and deliver a prioritised remediation report with exact fix commands.

Zero-Trust Architecture Design

I replace perimeter-based security with identity-first access controls across your entire cloud environment — BeyondCorp access policies, Cloud Armor WAF, VPC Service Controls, and Workload Identity Federation.

Security Incident Response Automation

I build automated incident response systems that contain cloud security threats in minutes — SCC-triggered Cloud Functions that quarantine compromised VMs, revoke suspicious IAM bindings, and notify your team before a human has even opened their laptop.

IAM Access Review & Governance

I conduct quarterly IAM access reviews across your GCP organisation — risk-scoring every binding, routing certification decisions to the right managers, revoking excess access immediately, and producing BigQuery evidence for SOC 2 and ISO 27001 audits.