Description

Build and govern the enterprise Google Cloud Platform, migrating legacy accounts, enforcing security guardrails, and managing FinOps at scale.

This role is on-site.

Responsibilities

• Design and deploy the GCP landing zone, including organization hierarchy, IAM, connectivity, and logging integrations.
• Migrate unmanaged accounts to managed identities and implement Entra-to-Google identity sync with SSO and MFA.
• Consolidate projects into a single billing account to enable FinOps invoicing and chargeback.
• Establish network guardrails, including public IP blocking, centralized VPCs, and hub architecture.
• Implement platform components as code using Terraform and document operational runbooks for platform teams.

Required Skills

• 5+ years of hands-on GCP platform engineering experience.
• Proficiency with Terraform for infrastructure as code.
• Deep knowledge of GCP IAM, Cloud Identity, org policies, and VPC networking.
• Experience with Microsoft Entra ID, SSO, and MFA integration.
• Working knowledge of cloud security posture management and centralized logging.
• Bachelor's degree in Computer Science or equivalent experience.

Preferred Skills

• Experience operating a second cloud (Azure) at enterprise scale.
• Familiarity with Wiz, CrowdStrike, or manufacturing/regulated environments.

Key Skills

Education

Bachelor's degree