At Lumenalta, we partner with forward-thinking organizations to build technology solutions that scale, delight users, and accelerate business growth. Our integral teams bring curiosity, commitment, and technical excellence to every project. We value transparency, autonomy, and impact—empowering every team member to do their best work.
We’re seeking an experienced Security Architect with deep cloud security expertise to join a high-stakes GCP platform engagement. This is a senior, hands-on role responsible for designing and validating the security posture of a multi-tenant cloud architecture—from VPC perimeter controls and identity propagation to penetration testing and formal security review defense. The right candidate is equally comfortable writing threat models, breaking tenant boundaries in a lab environment, and presenting architectural decisions to a formal security checkpoint panel.
Actively Hiring
We are hiring for a current opening on an active client project. This is a specific, presently open role.
We review applications on a rolling basis and aim to move qualified candidates through our process promptly.
What You'll Be Doing
Design and enforce cloud security controls on GCP—including VPC Service Controls perimeters, Credential Access Boundaries (CABs), and least-privilege IAM policies across multi-tenant environments.
Conduct penetration testing focused on tenant boundary validation, API and gs:// URI manipulation, privilege escalation paths, and lateral movement scenarios to proactively identify and close security gaps.
Lead threat modeling and architectural security reviews, translating complex platform designs into structured risk assessments and actionable remediation plans.
Validate identity propagation security across front-to-back delegation chains, ensuring tenant isolation is enforced at every layer of the architecture.
Design and implement DLP controls, data retention policies, and compliance/audit posture frameworks aligned with regulatory an