Senior GCP Cloud Architect — Remote, FedRAMP High

Ontrac Solutions LLC.; Northern (KY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

OnTrac seeks a Senior GCP Cloud Infrastructure Engineer to design and deliver a FedRAMP High-aligned GCP landing zone for a multi-department migration. You will consolidate legacy systems into a unified, IaC-managed environment and work with client stakeholders through definition to delivery.

The role emphasizes building secure, scalable cloud foundations with IAM, Assured Workloads, and API gateway capabilities, including OAuth/JWT and integrated SIEM/SOC logging.

Qualifications

• 8+ years designing and deploying production-grade Google Cloud Platform architectures at enterprise scale.
• Proven experience building GCP landing zones, including folder/project hierarchy, org policies, and labeling standards.
• Deep hands-on expertise implementing least-privilege IAM models integrated with an external Identity Provider for SSO.
• Experience provisioning Assured Workloads folders to meet regulated compliance boundaries (FedRAMP, CJIS, HIPAA, or IL4).
• Strong background in Infrastructure-as-Code using Git-based repositories and automated CI/CD deployment pipelines.
• Demonstrated skill configuring VPCs, VPNs, Interconnects, firewall rules, Cloud Armor, and VPC Service Controls.
• Experience with Cloud Operations Suite, including log sink configuration exporting to external SIEM/SecOps platforms.
• Hands-on experience implementing API Gateway or Apigee, including OAuth/JWT validation, rate limiting, and WAF policies.

Responsibilities

• Deliver a FedRAMP High-aligned GCP landing zone with org structure, policies, and labeling.
• Establish automated IaC Pipelines across four environments.
• Ensure end-to-end network security posture before production go-live.
• Stand up centralized API Gateway layer to securely broker 40+ external integrations.
• Provide audit-ready logging and monitoring aligned with the client SIEM/SecOps.

Skills

GCP architecture

FedRAMP compliance

IAM least-privilege

IaC pipelines

VPC/Networking

CI/CD pipelines

Cloud Security

Apigee/API Gateway

SIEM integration

OAuth/JWT

Tools

Git

CI/CD tooling

Apigee

Cloud Operations Suite

API Gateway

Job description

OnTrac seeks a Senior GCP Cloud Infrastructure Engineer to design and deliver a FedRAMP High-aligned GCP landing zone for a multi-department migration. You will consolidate legacy systems into a unified, IaC-managed environment and work with client stakeholders through definition to delivery.

The role emphasizes building secure, scalable cloud foundations with IAM, Assured Workloads, and API gateway capabilities, including OAuth/JWT and integrated SIEM/SOC logging.