The world of global advisory, audit and tax compliance services for large multi-nationals is rapidly changing and heavily dependent on technology.    

The KPMG Delivery Network (KDN) is a KPMG special purpose member firm offering a way for clients to leverage KPMG top talent and technology platforms through regional teams of specialists, enabling economies of scale and a new way of working that expands beyond local capability

As a member of KDN, you’ll be a part of the KPMG family working alongside some of our profession’s most skilled practitioners on rewarding programs and initiatives that are changing the way business operates, delivering value to our clients, and driving positive change in the communities we serve.

You’ll be enabling KDN accelerate new ways of working, using cutting-edge technology and working together with our member firms located in nearly 150 countries to help us achieve our ambition to be the most trusted and trustworthy professional services firm. 

And through your work, you’ll build a global network and unlock opportunities that you may not have thought possible with access to great support, vast resources, and an inclusive, supportive environment to help you reach your full potential.

Our KDN Bulgaria Cloud unit is focused on designing, building, securing and managing cloud native and hybrid platforms for the KPMG group of member firms, as well as providing cloud advisory and engineering services to external clients.

The role focuses on GCP security engineering, including organisation-level guardrails, identity and access management, data protection, Security Posture Management, threat detection and the integration of GCP security telemetry into global security operations.

Working across identity, data, applications, networks, infrastructure and endpoint security, the engineer will develop intelligent security capabilities that reduce manual effort, improve threat detection and response, strengthen preventive controls and deliver measurable operational outcomes.

The role combines deep GCP security expertise with security automation and innovation, leveraging technologies such as Google Security Command Center, Google Security Operations, Cloud Armor, VPC Service Controls, Microsoft Sentinel, Microsoft Defender, Wiz, Palo Alto, CrowdStrike, ServiceNow and AI-assisted security solutions.

• Design, implement and continuously improve security controls across enterprise Google Cloud environments.
• Design and maintain secure GCP resource hierarchies, organisation structures, folders, projects and landing-zone security controls.
• Implement and optimise identity and access controls aligned with least-privilege and Zero Trust principles.
• Engineer GCP network security capabilities, including VPC and Shared VPC designs, firewall controls, Cloud Armor and VPC Service Controls.
• Deploy, configure and optimise Google Cloud security technologies, including Security Command Center and Google Security Operations.
• Integrate Cloud Audit Logs, VPC Flow Logs, Security Command Center findings and other GCP telemetry into Microsoft Sentinel and/or Google Security Operations.
• Develop and enhance security detections, analytics, playbooks and automated response workflows.
• Support threat-hunting and incident-response teams by providing GCP security expertise, telemetry and technical integrations.
• Design, develop and maintain AI-driven security workflows and autonomous response capabilities.
• Engineer automation and orchestration solutions that reduce manual analyst effort and improve security response times.
• Develop reusable security automation frameworks using Terraform, Python, PowerShell, gcloud CLI and APIs.
• Deploy and optimise Cloud-Native Application Protection and Cloud Security Posture Management capabilities using Wiz or equivalent technologies.
• Integrate Security Posture Management insights into operational processes and CI/CD pipelines.
• Develop security metrics, dashboards and operational reporting that demonstrate the effectiveness of security capabilities.

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related technical field, or equivalent practical experience.
• 5+ years of hands-on cybersecurity experience across security operations, security engineering or security architecture.
• 3+ years of hands-on GCP security engineering experience within an enterprise environment.
• Strong understanding of the GCP resource hierarchy, IAM model, organisation policies and shared-responsibility model.
• Strong knowledge of GCP networking, including VPC, Shared VPC, firewall controls and network security architecture.
• Hands-on experience implementing security controls across Google Cloud environments.
• Experience with Google Security Command Center, Google Security Operations, Cloud Armor, VPC Service Controls or other GCP-native security services.
• Experience collecting and integrating Cloud Audit Logs, VPC Flow Logs and Security Command Center findings.
• Experience integrating GCP security telemetry with Microsoft Sentinel and/or Google Security Operations.
• Experience with Wiz or another Cloud-Native Application Protection or Cloud Security Posture Management platform.
• Practical experience with Terraform, including using Infrastructure as Code to deploy and manage cloud security capabilities.
• Proficiency in Python, PowerShell, gcloud CLI or comparable scripting and automation technologies.
• Experience with KQL and/or YARA-L and Unified Data Model searches within Google Security Operations.
• Experience developing APIs, security integrations, playbooks, automated workflows and orchestration solutions.
• Experience implementing and operating Microsoft security technologies, including Microsoft Sentinel, Defender XDR and Defender for Cloud.
• Strong understanding of cloud, identity, data, application, network, infrastructure and endpoint security controls.
• Strong knowledge of threat detection, incident response, vulnerability management and attack-surface reduction.
• Strong analytical, troubleshooting and communication skills in English.

• The chance to work in a top talent team
• Attractive remuneration
• Build knowledge in cutting-edge technologies
• Opportunity for continuous training, learning and certification
• Experience in an international and multicultural organization
• Work on challenging projects with clients in various industries around the globe
• Modern office environment
• Additional health insurance
• Life insurance
• 50+ benefits and services to choose from
• Hybrid working policy

KPMG Delivery Network Bulgaria is committed to building a diverse, equitable and truly inclusive company. We actively encourage diversity and inclusion, while opposing all forms of unlawful and unfair discrimination on the grounds of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation. Join us, and let us write your next chapter together!

© 2026 KPMG Delivery Network Ltd., a member firm of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved. The KPMG name and logo are registered trademarks or trademarks of KPMG International.