Senior Google Cloud Platform Architect

Quick Facts

• Role: Senior Google Cloud Platform Architect
• Focus: Enterprise cloud architecture, DevSecOps, and platform automation
• Compliance scope: FedRAMP Moderate and FedRAMP High; Assured Workloads; zero-trust and continuous authorization

Description

Serve as the principal technical authority for enterprise Google Cloud Platform architecture and platform automation across multi-tenant environments. Govern GCP landing zones, standardize Terraform-based provisioning, and implement CI/CD and continuous compliance. Lead secure portal-to-API orchestration for self-service provisioning and define enterprise AI security and ethical AI controls.

Responsibilities

• Design, maintain, and govern multi-folder GCP landing zones using Assured Workloads (FedRAMP Moderate/High), including organizational policy, data residency, and CMEK with Cloud KMS.
• Define and enforce boundaries between shared services management and tenant application workloads (firewalls, HA VPN, DNS, Infoblox, connectivity hubs).
• Author and standardize modular Terraform with JSON/YAML parameters for landing zone vending, subnet allocation, and zero-trust IAM roles.
• Implement VPC Service Controls, Workload Identity Federation, service account governance, and fine-grained RBAC.
• Architect CI/CD with GitHub Actions and Jenkins, including SAST, DAST, and dependency scanning in PR workflows.
• Establish continuous authorization baselines aligned to NIST SP 800-53 and FedRAMP with automated compliance validation and drift detection.
• Design centralized logging and monitoring using Cloud Logging sinks, Pub/Sub, Dataflow, and integrations such as Elastic Cloud or Splunk.
• Lead integration between user-facing portals and backend GCP APIs for self-service provisioning with standardized orchestration, state tracking, and error handling.
• Implement cross-boundary authentication using SAML 2.0, Entra ID, Keycloak, and OIDC federation.
• Define enterprise AI architecture standards for Vertex AI and Gemini, including PSC, VPC-SC, and CMEK for secure datasets and interactions.
• Oversee ethical AI controls including DLP, prompt security, and continuous monitoring of AI payloads.

Requirements

• 8+ years in cloud engineering, IT infrastructure, and DevSecOps; 4+ years as Lead GCP Engineer or Cloud Architect in complex multi-tenant environments.
• GCP architecture experience with Shared VPC, Interconnect or HA VPN, Palo Alto NGFW, and VPC Service Controls perimeters; GKE governance.
• Practical understanding of FedRAMP Moderate/High, Assured Workloads, DoD Iron Bank, and continuous monitoring.
• Must be able to work on a W2 basis and convert to FTE following contract duration.
• Must possess or be eligible for a Public Trust clearance.
• Preferred: Google Cloud Professional Cloud Architect and/or Professional Cloud Security Engineer.

Benefits

• Contract-to-hire opportunity; W2 work with conversion to FTE following contract duration.
• Medical, Dental, Vision benefits.
• 401(k) with company matching.
• Life insurance.