Description

You will design and deploy an enterprise GCP Landing Zone, establishing organization, folders, projects, IAM, networking, logging, and security integrations.

This role is on-site.

Responsibilities

• Migrate unmanaged Google accounts to managed identities with Microsoft Entra ID, SSO, and MFA integration.
• Consolidate projects into a centralized billing account supporting FinOps, invoicing, and chargeback models.
• Establish enterprise networking guardrails including centralized VPCs, hub architecture, private endpoints, and public IP restrictions.
• Centralize audit logging and monitoring, integrating enterprise security solutions such as Wiz and CrowdStrike.
• Develop reusable Infrastructure-as-Code solutions using Terraform and create technical standards and platform runbooks.

Required Skills

• Strong hands-on experience with Google Cloud Platform (GCP).
• Expertise in Cloud Identity, IAM, Organization Policies, VPC Networking, and Billing Administration.
• Experience with Microsoft Entra ID, Identity Federation, SSO, and MFA.
• Strong proficiency in Terraform and Infrastructure-as-Code.
• Experience implementing enterprise cloud governance, security, logging, and monitoring solutions.
• Proven experience transforming cloud environments from proof-of-concept to enterprise production platforms.
• Bachelor's degree.
• 5+ years of working experience.

Preferred Skills

• Enterprise-scale Azure experience.
• FinOps and cloud chargeback model implementation.
• Experience with Wiz, CrowdStrike, and regulated or manufacturing environments.

Key Skills

Education

Bachelor's degree