GCP Cloud Architect
- Compensation
- Not disclosed
- Location
- Pune; Bengaluru; Delhi / NCR
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Architecture
- Posted
Skills
Must have
- Experience 8+ years in IT infrastructure with 4+ years as a Lead/Senior Cloud Architect governing enterprise GCP environments.
- Deep hands-on architectural experience with Cloud Run,Cloud Composer (Apache Airflow), and Apigee API Management (including hybrid multi-cloud routing with AWS/Azure).
- Advanced expertise in Terraform / IaC for standardizing enterprise GCP landing zones and resource modules.
- Deep knowledge of GCP Networking: Shared VPCs, Private Service Connect (PSC), HA VPN, Cloud Interconnect, Cloud Armor, and Private Google Access.
- Extensive experience in GCP Security: Security Command Center (SCC) remediation, Workload Identity Federation, Service Account cleanup,
- Org Security Constraints, and IAP.
- Background in data platform integrations involving Google BigQuery,Cloud SQL (PostgreSQL), GCS lifecycle management, and enterprise GenAI integration.
- Certifications:-
- Google Cloud Certified Professional Cloud Architect (Required)
- Google Cloud Certified Professional Cloud Security Engineer or Professional Cloud Network Engineer
- (Highly Preferred)
Full description
We are seeking a GCP Cloud Architect to serve as the technical authority for our Google Cloud platform.You will lead the architecture, cross-cloud integration, landing zone governance, security compliance, and lifecycle management for a complex multi-application GCP environment.
Key Responsibilities:-
- Platform Governance & Landing Zones Architect and maintain enterprise landing zones, org hierarchies, billing-aligned folder structures, and VPC networking (Shared VPCs, Cloud NAT, Interconnect, HA VPN, PSC). Lead FinOps strategies: cost optimization, Looker Studio billing dashboards, CUDs, tagging, and reseller evaluations. Define HA/DR multi-region strategies, RTO/RPO targets, backup retention, and business continuity plans.
- Application Ecosystem & Workflows
Standardize container and serverless deployments using Cloud Run, GKE, and App Engine with private access controls. Architect workflow orchestration using Cloud Composer (Managed Apache Airflow) for
automated data ingestion and SFTP integrations. Support BigQuery, Cloud SQL (PostgreSQL), AI/ML,and GenAI initiatives (e.g., Gemini Code Assist, Confluence-integrated AI bots).
- Apigee API Management
Manage the full API lifecycle on Apigee (proxies, products, routing, developer apps, rate limiting). Secure cross-cloud routing between GCP Apigee, AWS backend workloads (e.g., JBoss), and Cloud Run
endpoints. Direct Apigee networking: Private Service Connect, load balancing, SSL certificates, and custom domains.
- CI/CD & Infrastructure Automation
Govern automated CI/CD pipelines (Cloud Build, GitHub Actions, GitLab CI, or Jenkins) supporting GitOps and ESM service requests. Standardize Terraform / OpenTofu modules for repeatable IaC provisioning to
eliminate configuration drift. Oversee centralized logging, monitoring, and observability using GCP Cloud Operations, Looker Studio, and evaluating third-party tools (Dynatrace, Selector AI, ThousandEyes).
- Security & Identity Transformation
Manage CSPM via Security Command Center (SCC) anomaly detection, alert remediation, and org policy enforcement (blocking risky roles, 2MFA). Enforce Zero-Trust security, IAP, OS Login, KMS, and migrate
service accounts to Workload Identity Federation. Implement perimeter security using Cloud Armor WAF,VPC Service Controls, and SSL/TLS automation.
- Technical Leadership & Operations
Serve as primary SME across application teams. Lead Architecture Design Reviews (ADRs), maintain Lucidchart technical documentation, and establish SLA/SLO metrics. Oversee change management,