Gcp Architect

Cloudxtreme; Kolkata District, Hyderabad, Bengaluru; On-site; INR 1,800,000 - 2,700,000; Full time

Job summary

Cloudxtreme is seeking an expert in cloud security to design and implement secure, scalable architectures for modern cloud workloads. You will lead security reviews of microservices, containers, and CI/CD pipelines, with a focus on zero-trust patterns and multi-cloud integration.

The role requires hands-on expertise with GCP security services, Kubernetes security controls, and policy-driven enforcement across architectures.

Qualifications

• Experience securing microservices and distributed systems.
• Hands-on with Terraform or similar IaC security tooling.
• Familiarity with security patterns in multi-cloud environments.
• Strong GCP security features such as IAM and VPC Service Controls.

Responsibilities

• Document and codify security reference architectures and guardrails.
• Spot gaps in architectures and propose secure solutions.
• Address security challenges in microservices and distributed systems.
• Implement IaC security with embedded policies.
• Harden CI/CD pipelines and ensure supply chain security.
• Oversee container and Kubernetes security controls.
• Enforce policies with admission controls (OPA/Gatekeeper, Kyverno).
• Promote secure patterns across multi-cloud environments.
• Develop secure, scalable, usable solutions.
• Leverage GCP security features (IAM, Cloud Armor, CMEK).

Skills

GCP security

Container security

Kubernetes

IaC security

CI/CD hardening

Zero-trust

Multi-cloud security

Service mesh security

Policy enforcement

API security

GKE/Anthos

Tools

Terraform

Deployment Manager

OPA

Gatekeeper

Kyverno

Istio

Envoy

GKE

Anthos

VPC Service Controls

Cloud Armor

CMEK

SCC

Job description

Expertise in GCP security services and secure cloud architectures
Strong hands-on experience with container security, Kubernetes, Infra-as-Code, and CI/CD
Familiarity with zero-trust principles and multi-cloud environments

Role Requirements in Detail:

• Document and codify security reference architectures, reusable guardrails, and secure-by-design patterns.
• Ability to spot gaps in existing architectures and propose practical, secure solutions.
• Experience with microservices/cellular architecture and distributed systems security challenges (isolation, blast radius reduction, service mesh security).
• Infra-as-Code security (Terraform, Deployment Manager, etc.) with embedded security policies.
• Familiarity with CI/CD hardening, artifact integrity, and supply chain security.
• Container security (GKE, Anthos, service mesh like Istio/Envoy).
• Kubernetes admission controls, policy enforcement (OPA/Gatekeeper, Kyverno).
• API security and zero-trust service-to-service authentication patterns.
• Multi-cloud literacy (GCP/AWS/Azure), especially as it supports secure pattern generalization.
• Develops secure, scalable, and highly usable solutions.
• Strong GCP experience (IAM, VPC Service Controls, Cloud Armor, SCC, CMEK, etc.).