Lead Cloud Architect

SR2; City Of London; Hybrid; GBP 120,000 - 129,000; Full time

Job summary

SR2 is seeking a Lead Cloud Architect for a high-profile central-government cloud transformation in the UK. You will shape a large-scale GCP estate, defining how the platform will be structured, governed, secured and operated for the long term.

Lead the current-state assessment, establish the target landing zone, organisation hierarchy and IAM and security controls, and guide the transition of platform ownership and operating model.

Qualifications

• Active SC clearance is essential.
• Extensive enterprise or cloud-architecture experience within large organisations.
• Strong knowledge of GCP governance, landing zones and IAM.

Responsibilities

• Lead the current-state assessment of the GCP estate and identify architectural, governance and operational improvements.
• Define the target GCP landing zone, organisation hierarchy and folder structure.
• Design enterprise-scale organisation policies, IAM controls and role-based access models.
• Develop the cloud operating model, including ownership, responsibilities, controls and service management.
• Define the identity strategy across Cloud Identity, Workforce Identity Federation and Entra ID.
• Design security architecture aligned with Secure by Design, NCSC guidance and CAF requirements.
• Establish FinOps governance, billing hierarchies, cost-allocation and chargeback approaches.
• Produce an operational transition model for the transfer of platform ownership and administration.

Skills

GCP governance

Enterprise cloud-architecture

Security architecture

FinOps

Identity management

Job description

Lead Cloud Architect - GCP - SC Cleared

Outside IR35: £650-£700 per day
Hybrid - 2-4 days per month in London
ASAP - long-term engagement

We are supporting a requirement for a Lead Cloud Architect for a high-profile central-government cloud transformation. This is an opportunity to shape the foundations of a large-scale GCP estate, defining how the platform will be structured, governed, secured and operated for the long term.

You will lead the current-state assessment and establish the future architecture, landing zone and operating model. A central part of the programme involves transitioning platform ownership and administration into the organisation, giving you significant influence over its future governance, identity, security, FinOps and operational capabilities.

Role responsibilities

• Lead the current-state assessment of the GCP estate and identify architectural, governance and operational improvements.
• Define the target GCP landing zone, organisation hierarchy and folder structure.
• Design enterprise-scale organisation policies, IAM controls and role-based access models.
• Develop the cloud operating model, including ownership, responsibilities, controls and service management.
• Define the identity strategy across Cloud Identity, Workforce Identity Federation and Microsoft Entra ID.
• Design security architecture aligned with Secure by Design, NCSC guidance and the Cyber Assessment Framework.
• Establish FinOps governance, billing hierarchies, cost-allocation and chargeback approaches.
• Produce an operational transition model for the transfer of platform ownership and administration.

Key experience and requirements

• Active SC clearance is essential.
• Significant enterprise or cloud-architecture experience within large, complex organisations.
• Strong experience with GCP governance, organisation management and resource hierarchies.
• Experience designing enterprise GCP landing zones and cloud operating models.
• Strong knowledge of GCP IAM, organisation policies and identity-management approaches.
• Experience designing cloud-security architecture within government or regulated environments.
• Strong understanding of Secure by Design, NCSC guidance and CAF requirements.
• Experience designing FinOps and cloud cost-management models, alongside strong stakeholder and architecture-governance skills.