Description

Key Responsibilities:
✅ Design and deploy an enterprise GCP Landing Zone including organization, folders, projects, IAM, networking, logging, and security integrations.
✅ Migrate unmanaged Google accounts to managed identities with Microsoft Entra ID, SSO, and MFA integration.
✅ Consolidate projects into a centralized billing account supporting FinOps, invoicing, and chargeback models.
✅ Establish enterprise networking guardrails including centralized VPCs, hub architecture, private endpoints, and public IP restrictions.
✅ Centralize audit logging, monitoring, and integrate enterprise security solutions such as Wiz and CrowdStrike.
✅ Develop reusable Infrastructure-as-Code (IaC) solutions using Terraform.
✅ Create technical standards, operational documentation, and platform runbooks for cloud operations teams.
🔹 Required Skills:
✔️ Strong hands-on experience with Google Cloud Platform (GCP)
✔️ Expertise in Cloud Identity, IAM, Organization Policies, VPC Networking, and Billing Administration
✔️ Experience with Microsoft Entra ID, Identity Federation, SSO & MFA
✔️ Strong proficiency in Terraform and Infrastructure-as-Code
✔️ Experience implementing enterprise cloud governance, security, logging, and monitoring solutions
✔️ Proven experience transforming cloud environments from proof-of-concept to enterprise production platforms
🔹 Preferred Skills:
⭐ Enterprise-scale Azure experience
⭐ FinOps and cloud chargeback model implementation
⭐ Experience with Wiz, CrowdStrike, and regulated or manufacturing environments

Key Skills

Education

Bachelor's degree