OCI & GCP Security Assessment Roadmap

I need a seasoned cloud-security specialist to give my Oracle Cloud Infrastructure and Google Cloud Platform estates a thorough health check, then guide me toward a Zero Trust posture.

First, you will assess both environments end-to-end—identity and access, network controls, data-at-rest and in-transit encryption, logging/monitoring pipelines, and workload configuration—mapping every finding to current best practice and the relevant CIS Benchmarks.

Next, I expect a concise report that clearly separates quick-win remediations from deeper, strategic fixes. Each item must carry a risk rating, the exact remediation steps, and any references to supporting documentation or Terraform snippets where useful.

Finally, translate the recommendations into a phased Zero Trust Network Access roadmap. Break it down by identity, device posture, segmentation model, and access policies, with milestones, estimated effort, and sequencing so I can plan budget and resources with confidence.

Deliverables (attach as PDFs or Google Docs):
• Assessment matrix with evidence, CIS alignment, and severity scores
• Prioritized remediation report (quick wins vs. strategic)
• Phased ZTNA roadmap with timeline, milestones, and effort estimates

Acceptance criteria:
• All findings are reproducible from supplied evidence
• Risk ratings follow a transparent methodology
• Roadmap milestones have realistic duration and dependency notes

I’ll supply current tenancy details and limited read-only access; you bring the expertise—ideally backed by OCI Security and/or Google Professional Cloud Security Engineer credentials and real-world Zero Trust rollout experience. Let’s secure these clouds the right way.