Description

Key Responsibilities:-

1. Platform Governance & Landing Zones
Architect and maintain enterprise landing zones, org hierarchies, billing-aligned folder structures, and VPC networking (Shared VPCs, Cloud NAT, Interconnect, HA VPN, PSC).   Lead FinOps strategies: cost optimization, Looker Studio billing dashboards, CUDs, tagging, and reseller evaluations.   Define HA/DR multi-region strategies, RTO/RPO targets, backup retention, and business continuity plans.  
2. Application Ecosystem & Workflows
Standardize container and serverless deployments using Cloud Run, GKE, and App Engine with private access controls.   Architect workflow orchestration using Cloud Composer (Managed Apache Airflow) for automated data ingestion and SFTP integrations.   Support BigQuery, Cloud SQL (PostgreSQL), AI/ML, and GenAI initiatives (e.g., Gemini Code Assist, Confluence-integrated AI bots).  
3. Apigee API Management
Manage the full API lifecycle on Apigee (proxies, products, routing, developer apps, rate limiting).   Secure cross-cloud routing between GCP Apigee, AWS backend workloads (e.g., JBoss), and Cloud Run endpoints.   Direct Apigee networking: Private Service Connect, load balancing, SSL certificates, and custom domains.  
4. CI/CD & Infrastructure Automation
Govern automated CI/CD pipelines (Cloud Build, GitHub Actions, GitLab CI, or Jenkins) supporting GitOps and ESM service requests.   Standardize Terraform / OpenTofu modules for repeatable IaC provisioning to eliminate configuration drift.   Oversee centralized logging, monitoring, and observability using GCP Cloud Operations, Looker Studio, and evaluating third-party tools (Dynatrace, Selector AI, ThousandEyes).  
5. Security & Identity Transformation
Manage CSPM via Security Command Center (SCC) anomaly detection, alert remediation, and org policy enforcement (blocking risky roles, 2MFA).   Enforce Zero-Trust security, IAP, OS Login, KMS, and migrate service accounts to Workload Identity Federation.   Implement perimeter security using Cloud Armor WAF, VPC Service Controls, and SSL/TLS automation.  
6. Technical Leadership & Operations
Serve as primary SME across application teams.   Lead Architecture Design Reviews (ADRs), maintain Lucidchart technical documentation, and establish SLA/SLO metrics.   Oversee change management, incident escalations, and continuous security compliance audits.


Qualifications & Skills Required:-
Experience 8+ years  in IT infrastructure with 4+ years as a Lead/Senior Cloud Architect governing enterprise GCP environments.
Deep hands-on architectural experience with Cloud Run,Cloud Composer (Apache Airflow), and Apigee API Management (including hybrid multi-cloud routing with AWS/Azure).
Advanced expertise in Terraform / IaC for standardizing enterprise GCP landing zones and resource modules.
Deep knowledge of GCP Networking: Shared VPCs, Private Service Connect (PSC), HA VPN, Cloud Interconnect, Cloud Armor, and Private Google Access.
Extensive experience in GCP Security: Security Command Center (SCC) remediation, Workload Identity Federation, Service Account cleanup,
Org Security Constraints, and IAP.
Background in data platform integrations involving Google BigQuery,Cloud SQL (PostgreSQL), GCS lifecycle management, and enterprise GenAI integration

Key Skills

Education

Any Gradute