Senior GCP Architect – Cloud Engineer

Job Description: Lead the architecture and implementation of GCP Entitlement and Access Control systems, including IAM policies, service account governance, and least-privilege access models Design and deliver a self-serve Landing Zone framework that enables Platform Engineering teams to provision and manage cloud environments consistently and at scale Co-lead delivery of a Platform Ops Portal, covering management functions such as environment provisioning, access requests, cost visibility, and operational workflows Partner with client engineering and security teams to align the access control model with regulatory and compliance requirements in a financial services context Define and enforce GCP governance guardrails, including organization policies, resource hierarchy design, and VPC Service Controls Drive technical review, identify gaps, and shape the delivery approach before the project kicks off Enable internal teams through documentation, runbooks, and knowledge transfer that outlast the engagementRequirements: 7+ years in cloud engineering or architecture, with at least 4 years hands-on with GCP in a lead or architect capacity Deep expertise in GCP IAM, including workload identity, service account management, custom roles, and policy inheritance Proven experience designing Landing Zones or platform engineering frameworks on GCP (Cloud Foundation Toolkit, blueprints, or equivalent) Experience building or contributing to internal developer portals or Platform Ops tooling (Backstage, custom portals, or similar) Strong command of Infrastructure-as-Code, primarily Terraform on GCP Ability to engage directly with client stakeholders and translate technical architecture decisions into clear recommendations Nice to Have: Experience with GCP Security Command Center, Chronicle, or Access Transparency Familiarity with GCP Assured Workloads or sovereign cloud configurations for regulated industries Background in multi-cloud environments where GCP is the primary landing zone Google Cloud Professional certifications (Cloud Architect, Security Engineer, or equivalent)Benefits: Employees can work remotely