GCP Cloud Architect

TENARAI TECHNOLOGIES PRIVATE LIMITED; Pune District, Bengaluru, Delhi; On-site; INR 4,500,000 - 7,500,000; Full time

Job summary

TENARAI TECHNOLOGIES PRIVATE LIMITED in Pune seeks a Platform Governance Architect to lead enterprise landing zones, multi-region resilience, and FinOps optimization across GCP. You will shape infrastructure strategy, enforce security, and drive cost efficiency.

The role covers containerized and serverless patterns (Cloud Run, GKE, App Engine), Apigee API management, CI/CD automation, and data platform integrations with BigQuery and Cloud SQL, with a strong emphasis on leadership and ADR-driven

Qualifications

• 8+ years in IT infra with 4+ years as Lead/Senior Cloud Architect for enterprise GCP.
• Hands-on with Cloud Run, Cloud Composer, and Apigee API Management.
• Advanced Terraform / IaC for standardizing enterprise GCP landing zones.
• Deep knowledge of GCP Networking and Security (SCC, IAP, KMS).
• Experience with data platforms (BigQuery, Cloud SQL) and GenAI integrations.

Responsibilities

• Govern enterprise landing zones, org hierarchies, and multi-region RTO/RPO strategies.
• Standardize container/serverless deployments and workflow orchestration.
• Manage Apigee API lifecycle, cross-cloud routing, and private service connections.
• Oversee CI/CD pipelines and IaC modules to prevent drift.
• Lead architecture reviews, ensure security compliance, and governance SLAs.
• Drive FinOps, cost dashboards, and monitoring/observability implementations.

Skills

Cloud architecture

GCP expertise

Terraform IaC

Network security

Leadership

Tools

Terraform

OpenTofu

Cloud Build

GitHub Actions

Jenkins

Job description

Key Responsibilities:-

• 1. Platform Governance & Landing Zones Architect and maintain enterprise landing zones, org hierarchies, billing-aligned folder structures, and VPC networking (Shared VPCs, Cloud NAT, Interconnect, HA VPN, PSC). Lead FinOps strategies: cost optimization, Looker Studio billing dashboards, CUDs, tagging, and reseller evaluations. Define HA/DR multi-region strategies, RTO/RPO targets, backup retention, and business continuity plans.

• 2. Application Ecosystem & Workflows

  Standardize container and serverless deployments using Cloud Run, GKE, and App Engine with private access controls. Architect workflow orchestration using Cloud Composer (Managed Apache Airflow) for

  automated data ingestion and SFTP integrations. Support BigQuery, Cloud SQL (PostgreSQL), AI/ML,and GenAI initiatives (e.g., Gemini Code Assist, Confluence-integrated AI bots).

• 3. Apigee API Management

  Manage the full API lifecycle on Apigee (proxies, products, routing, developer apps, rate limiting). Secure cross-cloud routing between GCP Apigee, AWS backend workloads (e.g., JBoss), and Cloud Run

  endpoints. Direct Apigee networking: Private Service Connect, load balancing, SSL certificates, and custom domains.

• 4. CI/CD & Infrastructure Automation

  Govern automated CI/CD pipelines (Cloud Build, GitHub Actions, GitLab CI, or Jenkins) supporting GitOps and ESM service requests. Standardize Terraform / OpenTofu modules for repeatable IaC provisioning to

  eliminate configuration drift. Oversee centralized logging, monitoring, and observability using GCP Cloud Operations, Looker Studio, and evaluating third-party tools (Dynatrace, Selector AI, ThousandEyes).

• 5. Security & Identity Transformation

  Manage CSPM via Security Command Center (SCC) anomaly detection, alert remediation, and org policy enforcement (blocking risky roles, 2MFA). Enforce Zero-Trust security, IAP, OS Login, KMS, and migrate

  service accounts to Workload Identity Federation. Implement perimeter security using Cloud Armor WAF,VPC Service Controls, and SSL/TLS automation.

• 6. Technical Leadership & Operations

  Serve as primary SME across application teams. Lead Architecture Design Reviews (ADRs), maintain Lucidchart technical documentation, and establish SLA/SLO metrics. Oversee change management,

  incident escalations, and continuous security compliance audits.

Qualifications & Skills Required:-

• Experience 8+ years in IT infrastructure with 4+ years as a Lead/Senior Cloud Architect governing enterprise GCP environments.

• Deep hands-on architectural experience with Cloud Run,Cloud Composer (Apache Airflow), and Apigee API Management (including hybrid multi-cloud routing with AWS/Azure).

• Advanced expertise in Terraform / IaC for standardizing enterprise GCP landing zones and resource modules.

• Deep knowledge of GCP Networking: Shared VPCs, Private Service Connect (PSC), HA VPN, Cloud Interconnect, Cloud Armor, and Private Google Access.

• Extensive experience in GCP Security: Security Command Center (SCC) remediation, Workload Identity Federation, Service Account cleanup,

• Org Security Constraints, and IAP.

• Background in data platform integrations involving Google BigQuery,Cloud SQL (PostgreSQL), GCS lifecycle management, and enterprise GenAI integration.

Certifications:-

• Google Cloud Certified Professional Cloud Architect (Required)
• Google Cloud Certified Professional Cloud Security Engineer or Professional Cloud Network Engineer
• (Highly Preferred)