GCP Cloud Architect

UNAVAILABLE; McLean (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

UNAVAILABLE is seeking an experienced Cloud Architect to lead Google Cloud Platform strategies, migrations, and optimization for regulated workloads. You will own GCP landing zones, Terraform foundations, and organizational policies while coordinating with developers and security teams.

The role requires extensive hands-on Cloud architecture experience, strong DevSecOps practices, and the ability to design secure, scalable cloud solutions across production and development environments in a

Qualifications

• 8–10+ years of experience with GCP platform services and DevOps practices, including infrastructure as code and configuration management automation.
• Hands-on architectural ownership of enterprise GCP landing zones and cloud environments.
• Experience with security controls in regulated environments (NIST 800-53, FedRAMP, FISMA).
• Proven ability to design cloud architectures, migrations, and optimization strategies.
• Strong collaboration with developers, engineers, and stakeholders across teams.

Responsibilities

• Identify and implement optimal GCP-based solutions for the customer.
• Design GCP environments for production, staging, QA, and development infrastructures.
• Architect Landing Zone architectures, Terraform foundations, and organizational policies with guardrails.
• Design hybrid connectivity, DNS, VPC networks, and Shared VPC models.
• Automate and improve CI/CD pipelines using Cloud Build, Cloud Deploy, and related tools.
• Ensure security and compliance across systems and deployments.
• Provide technical mentorship and cross-training to team members.

Skills

GCP expertise

DevSecOps

Terraform

Terragrunt

Kubernetes

IaC

Cloud Security

Networking

Python scripting

Education

Bachelor’s degree in IT or related field

Tools

GitHub/GitLab/Bitbucket

Cloud Build

Cloud Deploy

Artifact Registry

Cloud DNS

Job description

Overview

As a Cloud Architect, you will work within our growing DevSecOps practice delivering features to support cloud migration, cloud optimization, and cloud deployment on Google Cloud Platform (GCP). This role is responsible for the design, standards, and architectural direction of GCP environments supporting mission-critical, regulated workloads.

We are looking for candidates with 8-10 years of experience with GCP platform services and DevOps practices such as infrastructure as code and configuration management automation, and deep, hands-on architectural ownership of enterprise GCP landing zones.

Responsibilities

• Identify and implement the most optimal GCP-based solutions for the customer
• Design GCP cloud environments and demonstrate technical architectural knowledge, playing a vital role in the design of production, staging, QA, and development infrastructures running in 24×7 environments
• Architect and own GCP Landing Zone Architectures, GCP Terraform Foundations, and Organizational Policies, incorporating guardrails and standards established by leadership
• Design hybrid connectivity architecture, including Cloud Interconnect
• Design DNS architecture, including Cloud DNS, Private Zones, and hybrid DNS resolution
• Design VPC-level networking architecture and standards, including Shared VPC architecture and VPC firewall rules
• Implement and oversee cloud strategies including migrations and optimization
• Establish development tools and infrastructure for automation
• Understand the needs of stakeholders and convey this to developers and engineers
• Automate and improve development, testing, deployment, and release processes using Cloud Build, Cloud Deploy, Artifact Registry, and Cloud Source Repositories, Cloud Run functions, and infrastructure as code
• Test and examine code written by others and analyze results
• Perform root cause analysis on complex business processes and technical components
• Ensure that systems are safe and secure against cybersecurity threats, leveraging Security Command Center and NIST 800-53/FedRAMP/FISMA control frameworks
• Identify technical problems, perform root cause analysis, and develop software updates and fixes
• Work with software developers and software engineers to ensure that development follows established processes and works as intended
• Support enterprise cloud applications and infrastructure through infrastructure as code, including automated server and network configurations, large-scale software deployments, and monitoring and testing (CI/CD)
• Document the as-is state of the environment, perform gap analysis, and produce artifacts that articulate options and recommendations
• Leverage virtualization and containerization to optimize and modernize software systems
• Act as an individual contributor and provide technical mentorship on best practices
• Engineer and implement solutions and provide recommendations for continuous improvement of the services provided
• Present regular status updates and provide cross-training to other team members

Qualifications

• Ability to obtain a U.S. Government security clearance.
• Bachelor’s degree in an IT-related field, or a bachelor’s degree in a non-IT field with at least 2 years of related IT experience.
• 10+ years of overall professional experience.
• 8+ years of experience architecting, designing, developing, and implementing cloud solutions.
• 8+ years of experience with systems development in an Agile environment.
• 5+ years of experience implementing proof-of-concept (POC) or minimum viable product (MVP) solutions and participating in sprint demonstrations.
• 5+ years of experience across several of the following areas: database architecture, ETL, business intelligence, big data, machine learning, and advanced analytics.
• 8+ years of experience using Git source control management (SCM) platforms such as GitHub, GitLab, or Bitbucket.
• 8+ years of experience implementing infrastructure as code (IaC) and orchestration.
• 8+ years of experience integrating deployments with industry-standard DevSecOps tooling and orchestration.
• Hands-on experience with GCP technologies and related tools, including:
  • GCP Landing Zone architectures
  • GCP Terraform Foundations
  • Terraform and Terragrunt
  • Organizational policies
  • Cloud Build and Cloud Deploy
  • Artifact Registry
  • Cloud Source Repositories
  • Cloud Interconnect, Cloud DNS, Private Zones, and hybrid DNS management
  • VPC firewall rule administration
  • Cloud Logging and Cloud Monitoring
  • Security Command Center
  • Cloud Run functions
  • Cloud Storage
  • BigQuery
  • Google Workspace administration and identity management
  • Google Cloud Directory Services
  • Shared VPC architecture and hub-and-spoke networking
  • Python scripting
  • Networking, including IPv6
• Experience implementing or operating within environments subject to NIST 800-53, FedRAMP, and FISMA requirements.
• Google Cloud Professional Cloud Architect certification (current or previously held).

Preferred

• Excellent written and verbal communication, interpersonal, and collaboration skills.
• Experience documenting the as-is state of an environment, performing gap analyses, and developing artifacts that articulate options and recommendations.
• Experience with scripting languages such as Bash, PowerShell, Python, Groovy, or Ruby.
• Experience implementing Docker containers and working with platforms such as Kubernetes.
• Experience with automation tools, including Terraform, Terragrunt, or Ansible.