Lead Cloud Architect
Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Full-time
Legal agreement: Employment
Posted about 5 hours ago
Responsibilities
Key Responsibilities:
Platform Governance and Landing Zones:
- Architect and maintain enterprise landing zones, org hierarchies, billing-aligned folder structures, and VPC networking including Shared VPCs, Cloud NAT, Interconnect, HA VPN, and PSC.
- Lead FinOps strategies including cost optimization, Looker Studio billing dashboards, CUDs, tagging, and reseller evaluations.
- Define HA/DR multi-region strategies, RTO/RPO targets, backup retention, and business continuity plans.
Application Ecosystem and Workflows:
- Standardize container and serverless deployments using Cloud Run, GKE, and App Engine with private access controls.
- Architect workflow orchestration using Cloud Composer (Managed Apache Airflow) for automated data ingestion and SFTP integrations.
- Support BigQuery, Cloud SQL (PostgreSQL), AI/ML, and GenAI initiatives including Gemini Code Assist and Confluence-integrated AI bots.
Apigee API Management:
- Manage the full API lifecycle on Apigee including proxies, products, routing, developer apps, and rate limiting.
- Secure cross-cloud routing between GCP Apigee, AWS backend workloads such as JBoss, and Cloud Run endpoints.
- Direct Apigee networking including Private Service Connect, load balancing, SSL certificates, and custom domains.
CI/CD and Infrastructure Automation:
- Govern automated CI/CD pipelines including Cloud Build, GitHub Actions, GitLab CI, or Jenkins supporting GitOps and ESM service requests.
- Standardize Terraform and OpenTofu modules for repeatable IaC provisioning to eliminate configuration drift.
- Oversee centralized logging, monitoring, and observability using GCP Cloud Operations, Looker Studio, and evaluating third-party tools like Dynatrace, Selector AI, and ThousandEyes.
Security and Identity Transformation:
- Manage CSPM via Security Command Center (SCC) anomaly detection, alert remediation, and org policy enforcement including blocking risky roles and 2MFA.
- Enforce Zero-Trust security, IAP, OS Login, KMS, and migrate service accounts to Workload Identity Federation.
- Implement perimeter security using Cloud Armor WAF, VPC Service Controls, and SSL/TLS automation.
Technical Leadership and Operations:
- Serve as primary SME across application teams.
- Lead Architecture Design Reviews (ADRs), maintain Lucidchart technical documentation, and establish SLA/SLO metrics.
- Oversee change management, incident escalations, and continuous security compliance audits.
Qualifications and Skills Required:
- Experience of 8+ years in IT infrastructure with 4+ years as a Lead/Senior Cloud Architect governing enterprise GCP environments.
- Deep hands-on architectural experience with Cloud Run, Cloud Composer (Apache Airflow), and Apigee API Management including hybrid multi-cloud routing with AWS/Azure.
- Advanced expertise in Terraform and IaC for standardizing enterprise GCP landing zones and resource modules.
- Deep knowledge of GCP Networking including Shared VPCs, Private Service Connect (PSC), HA VPN, Cloud Interconnect, Cloud Armor, and Private Google Access.
- Extensive experience in GCP Security including Security Command Center (SCC) remediation, Workload Identity Federation, Service Account cleanup, Org Security Constraints, and IAP.
- Background in data platform integrations involving Google BigQuery, Cloud SQL (PostgreSQL), GCS lifecycle management, and enterprise GenAI integration.
Certifications:
- Google Cloud Certified Professional Cloud Architect (Required).
- Google Cloud Certified Professional Cloud Security Engineer or Professional.
Notes:
- Apigee along with GCP is mandatory.
- Google Cloud certification is mandatory.