GCP Administrator AI Agent Platform And Security

FirmaTRUST; Lahore; On-site; PKR 1,800,000 - 2,800,000; Full time

Job summary

FirmaTRUST is seeking a seasoned Google Cloud (GCP) administrator based in Lahore to own day-to-day administration, security, and reliability of client workloads on GCP, Gemini Enterprise Platform, Harness pipelines, and Cloud Armor.

You will manage Agent Platform, implement IAM with least privilege, and monitor cost, latency, and health across environments. Strong scripting and Terraform experience are essential in a fast-paced managed services setting.

Qualifications

• 5+ years in cloud infrastructure or systems administration.
• 3+ years administering production GCP environments.
• Hands-on with Vertex AI or Gemini Enterprise Agent Platform.
• 2+ years administering Harness for GCP deployments.
• Strong GCP IAM, networking (VPC, Private Service Connect, load balancing) and VPC Service Controls.
• Terraform IaC; scripting in Python, Bash or Go.
• Experience with Cloud Monitoring, Logging and incident response.

Responsibilities

• Administer Google Cloud (GCP) workloads and Gemini Enterprise Platform for client projects.
• Manage Agent Platform deployments, access control and quotas.
• Configure Model Armor and Cloud Armor security policies.
• Oversee Harness pipelines and CI/CD for GCP deployments.
• Monitor health, latency, and spend; report to leadership.

Skills

Cloud infrastructure

GCP

IAM

CI/CD

Terraform

Education

Bachelor's degree in Computer Science/IT

Tools

Terraform

Gcloud CLI

Job description

Job Description:

Who We Are:

We are a privately owned leading Managed IT Services company (Managed Service Provider). Since 1996, we have specialized in providing a full range of services, including Network & Security, UNIX/Linux & Windows Engineering, Systems & Database Administration, on-premises and cloud services, Help Desk Support, VoIP Support, and managed IT infrastructure for small and medium-sized enterprises.

At FirmaTRUST, we are committed to delivering reliable, secure, and innovative technology solutions to our clients. We are looking for highly skilled and passionate cloud infrastructure professionals who can help elevate our services and drive the growth and success of our company.

Role overview

We need a qualified Google Cloud (GCP) administrator. The role owns day-to-day administration, security, and reliability of the client's AI agent and application workloads on GCP, Gemini Enterprise Agent Platform, Harness delivery pipelines, Model Armor, and Cloud Armor.

Key responsibilities

Gemini Enterprise Agent Platform

Administer the Agent Platform and the Gemini Enterprise app for the client projects, environments, quotas, billing alerts, and API enablement.

Deploy, version and operate agents on Agent Runtime, including agents built with Agent Studio and the Agent Development Kit (ADK).

Manage Model Garden access, model endpoints, Sessions, Memory Bank, RAG Engine and Vector Search configurations.

Govern agents through Agent Identity, the agent registry, and Agent Gateway; enforce least-privilege IAM for agents, tools, and MCP servers.

Publish approved agents to the Gemini Enterprise app and manage user access, connectors and data sources.

Monitor agent health, latency, cost and quality using Agent Observability, Cloud Monitoring, Cloud Logging and Cloud Trace.

Harness (CI/CD and release automation)

Administer Harness pipelines that build, test and deploy the client's agent and application workloads to GCP.

Maintain delegates, connectors, secrets, environments and approval gates for GCP targets (Cloud Run, GKE, Agent Runtime).

Embed policy checks, security scans and rollback strategies into release pipelines.

Keep infrastructure-as-code (Terraform) and pipeline definitions version-controlled and peer-reviewed.

Model Armor (AI security)

Create and maintain Model Armor templates and floor settings that screen prompts, responses and tool output.

Configure filters for prompt injection, jailbreak attempts, sensitive data (via Sensitive Data Protection), harmful content and malicious URLs.

Integrate Model Armor with Agent Gateway and agent code so all agent traffic is inspected.

Review findings in Security Operations Center, tune false positives, and report on blocked threats.

Cloud Armor (application security)

Manage Cloud Armor security policies for the client's external load balancers and public-facing applications.

Maintain WAF rules (OWASP Top 10), rate limiting, bot management, geo and IP allow/deny lists.

Enable and tune Adaptive Protection for layer-7 DDoS detection; respond to attack alerts.

Core GCP administration

Manage the resource hierarchy, IAM, service accounts, organization policies and VPC Service Controls.

Administer networking: VPCs, Private Service Connect, Cloud NAT, load balancers and DNS.

Run patching, backup, disaster recovery and capacity planning for in-scope workloads.

Handle incidents and change requests within agreed SLAs, maintain runbooks and architecture documentation.

Track and optimize cloud spend, report monthly to the Leadership team

Required qualifications

5+ years in cloud infrastructure or systems administration, with at least 3 years administering production GCP environments.

Hands-on experience with Vertex AI or the Gemini Enterprise Agent Platform: deploying models or agents, managing endpoints and controlling access.

Working knowledge of Model Armor templates and Cloud Armor security policies, including WAF and rate-limiting rules.

2+ years administering Harness (or a comparable CI/CD platform such as Cloud Build, GitLab CI or Jenkins) for GCP deployments.

Strong GCP IAM, networking (VPC, Private Service Connect, load balancing) and VPC Service Controls skills.

Infrastructure-as-code with Terraform; scripting in Python, Bash or Go; fluent with gcloud CLI.

Experience with Cloud Monitoring, Cloud Logging and alerting, on-call and incident response in a client-facing setting.

Bachelor's degree in Computer Science, IT or a related field, or equivalent experience.

Certifications (at least one required):

Google Cloud Professional Cloud Architect, Professional Cloud Security Engineer, or Associate Cloud Engineer.

Preferred qualifications and soft skills

Google Cloud Professional Machine Learning Engineer or Generative AI Leader certification; Harness Certified Continuous Delivery Administrator.

Experience with Agent Gateway, Agent Identity, MCP servers and the Agent Development Kit.

Familiarity with Sensitive Data Protection, Security Command Center and Cloud Run or GKE.

Background supporting retail, beauty or consumer-goods clients, including e-commerce traffic peaks.

Clear written and spoken communication with both technical teams and business stakeholders.

Ownership mindset: documents work, raises risks early, and follows changes through to closure.

Comfortable working in an ITIL-style change and incident process with client approvals.