Description

Design and deploy an enterprise GCP landing zone with governance, identity, and security integrations.

This role is on-site.

Responsibilities

• Build the organization, folder, and project structure with IAM, connectivity, and logging aligned to best practices.
• Migrate unmanaged accounts to managed identities and implement Entra-to-Google sync for SSO and MFA.
• Consolidate projects into a single billing account to enable FinOps invoicing and chargeback.
• Establish network guardrails including public IP blocking, centralized VPCs, and hub architecture.
• Centralize audit logging and monitoring while integrating enterprise security tooling like Wiz and CrowdStrike.

Required Skills

• Hands-on GCP platform engineering experience with Cloud Identity, IAM, org policies, VPC networking, and billing administration.
• Identity federation experience with Microsoft Entra ID, SSO, and MFA.
• Infrastructure as code proficiency with Terraform for reusable, secure, policy-enforced modules.
• Working knowledge of cloud security posture management and log/monitoring centralization.
• Experience taking a cloud environment from POC to an enterprise-governed state.
• 3+ years of experience in cloud platform engineering.

Preferred Skills

• Experience operating a second cloud (Azure) at enterprise scale.
• FinOps and chargeback model experience.
• Familiarity with Wiz, CrowdStrike, and manufacturing or regulated enterprise environments.

Key Skills

Education

Not specified