GCP Cloud Architect

Steampunk, Inc.; McLean (VA); On-site; USD 130,000 - 215,000; Full time

Job summary

Steampunk, Inc. is seeking a Cloud Architect to lead DevSecOps guidance for GCP migrations, optimization, and deployment.

You will own enterprise GCP landing zones, design hybrid connectivity, and enforce standards and security controls across production, staging, QA, and development environments. The role requires 8–10 years in GCP and DevOps, hands-on experience with IaC, Terraform, Terragrunt, Cloud Build/Deploy, and strong collaboration with developers, security, and governance teams to

Qualifications

• Bachelor's degree in an IT-related field or equivalent IT experience.
• 10+ years of professional experience with cloud solutions.
• 8+ years architecting, designing, and implementing cloud solutions in GCP.

Responsibilities

• Identify optimal GCP-based solutions for customers.
• Design GCP environments for production, staging, QA, and development.
• Architect and own GCP Landing Zone architectures and guardrails.
• Automate deployments using CI/CD and IaC.
• Ensure security controls per NIST 800-53/FedRAMP/FISMA across environments.

Skills

GCP

Terraform

Kubernetes

IaC

DevSecOps

Security

CI/CD

Python

Networking

Landing Zone

Education

Bachelor's degree

Tools

GitHub

GitLab

Bitbucket

Terraform

Job description

As a Cloud Architect, you will work within our growing DevSecOps practice delivering features to support cloud migration, cloud optimization, and cloud deployment on Google Cloud Platform (GCP). This role is responsible for the design, standards, and architectural direction of GCP environments supporting mission‑critical, regulated workloads.

We are looking for candidates with 8‑10 years of experience with GCP platform services and DevOps practices such as infrastructure as code and configuration management automation, and deep, hands‑on architectural ownership of enterprise GCP landing zones.

Contributions

• Identify and implement the most optimal GCP‑based solutions for the customer
• Design GCP cloud environments and demonstrate technical architectural knowledge, playing a vital role in the design of production, staging, QA, and development infrastructures running in 24×7 environments
• Architect and own GCP Landing Zone Architectures, GCP Terraform Foundations, and Organizational Policies, incorporating guardrails and standards established by leadership
• Design hybrid connectivity architecture, including Cloud Interconnect
• Design DNS architecture, including Cloud DNS, Private Zones, and hybrid DNS resolution
• Design VPC‑level networking architecture and standards, including Shared VPC architecture and VPC firewall rules
• Implement and oversee cloud strategies including migrations and optimization
• Establish development tools and infrastructure for automation
• Understand the needs of stakeholders and convey this to developers and engineers
• Automate and improve development, testing, deployment, and release processes using Cloud Build, Cloud Deploy, Artifact Registry, and Cloud Source Repositories, Cloud Run functions, and infrastructure as code
• Test and examine code written by others and analyze results
• Perform root cause analysis on complex business processes and technical components
• Ensure that systems are safe and secure against cybersecurity threats, leveraging Security Command Center and NIST 800‑53/FedRAMP/FISMA control frameworks
• Identify technical problems, perform root cause analysis, and develop software updates and fixes
• Work with software developers and software engineers to ensure that development follows established processes and works as intended
• Support enterprise cloud applications and infrastructure through infrastructure as code, including automated server and network configurations, large‑scale software deployments, and monitoring and testing (CI/CD)
• Document the as‑is state of the environment, perform gap analysis, and produce artifacts that articulate options and recommendations
• Leverage virtualization and containerization to optimize and modernize software systems
• Act as an individual contributor and provide technical mentorship on best practices
• Engineer and implement solutions and provide recommendations for continuous improvement of the services provided
• Present regular status updates and provide cross‑training to other team members

Qualifications

• Ability to obtain a U.S. Government security clearance.
• Bachelor’s degree in an IT‑related field, or a bachelor’s degree in a non‑IT field with at least 2 years of related IT experience.
• 10+ years of overall professional experience.
• 8+ years of experience architecting, designing, developing, and implementing cloud solutions.
• 8+ years of experience with systems development in an Agile environment.
• 5+ years of experience implementing proof‑of‑concept (POC) or minimum viable product (MVP) solutions and participating in sprint demonstrations.
• 5+ years of experience across several of the following areas: database architecture, ETL, business intelligence, big data, machine learning, and advanced analytics.
• 8+ years of experience using Git source control management (SCM) platforms such as GitHub, GitLab, or Bitbucket.
• 8+ years of experience implementing infrastructure as code (IaC) and orchestration.
• 8+ years of experience integrating deployments with industry‑standard DevSecOps tooling and orchestration.
• Hands‑on experience with GCP technologies and related tools, including:
• GCP Landing Zone architectures
• GCP Terraform Foundations
• Terraform and Terragrunt
• Organizational policies
• Cloud Build and Cloud Deploy
• Artifact Registry
• Cloud Source Repositories
• Cloud Interconnect, Cloud DNS, Private Zones, and hybrid DNS management
• VPC firewall rule administration
• Cloud Logging and Cloud Monitoring
• Security Command Center
• Cloud Run functions
• Cloud Storage
• BigQuery
• Google Workspace administration and identity management
• Google Cloud Directory Services
• Shared VPC architecture and hub‑and‑spoke networking
• Python scripting
• Networking, including IPv6
• Experience implementing or operating within environments subject to NIST 800‑53, FedRAMP, and FISMA requirements.
• Google Cloud Professional Cloud Architect certification (current or previously held).

Preferred

• Excellent written and verbal communication, interpersonal, and collaboration skills.
• Experience documenting the as‑is state of an environment, performing gap analyses, and developing artifacts that articulate options and recommendations.
• Experience with scripting languages such as Bash, PowerShell, Python, Groovy, or Ruby.
• Experience implementing Docker containers and working with platforms such as Kubernetes.
• Experience with automation tools, including Terraform, Terragrunt, or Ansible.

About Steampunk

Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $130,000 to $215,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk’s total compensation package for employees. Learn more about additional Steampunk benefits here.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. If you want to learn more about our story, visit http://www.steampunk.com .

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E‑Verify program.