Senior Google Cloud Platform Product Owner

Capgemini America, Inc.; New York (NY); On-site; USD 72,000 - 105,000; Full time

Benefits offered by this job

Paid time off

Medical, dental, and vision coverage

Retirement savings plans

Life and disability insurance

Employee assistance programs

Other local benefits

Job summary

Capgemini America, Inc. is seeking a seasoned Google Cloud Platform engineer to design and run the foundation, landing zone, and data/app services across multiple tenants on GCP.

You will own IAM, networking, encryption, DLP, and observability, while delivering infrastructure as code with Terraform and CI/CD. The role emphasizes security engineering, regulated industry experience, and client-facing delivery, with a focus on reliability, cost control, and multi-tenant isolation.

Qualifications

• 5 years of cloud or platform engineering experience, including production Google Cloud.
• Deep Google Cloud Platform fluency: IAM, VPC and Private Service Connect, VPC Service Controls, Cloud Run, BigQuery, Cloud Storage, Pub/Sub, and Cloud KMS.
• Terraform and CI/CD for cloud infrastructure.
• Security engineering on Google Cloud Platform: organization policy, audit logging, secrets management, CMEK, and Sensitive Data Protection.
• Observability design: Cloud Monitoring, Logging, alerting, and service-level objectives.
• Strong scripting in Python or Bash, and working SQL for BigQuery administration.
• Experience in regulated industries, ideally financial services: data residency, consent frameworks, GLBA, Fair Lending, and UDAAP.
• Ability to operate in client-facing consulting delivery contexts, translating business requirements into technical specifications.

Responsibilities

• Design and operate the Google Cloud resource hierarchy: organization, folders, and projects per environment and per tenant.
• Own identity and access: IAM roles, service accounts, Workload Identity Federation, short-lived credentials, and least-privilege reviews.
• Own networking: VPC design, Private Google Access, Private Service Connect, firewall policy, and DNS.
• Implement VPC Service Controls perimeters and the controlled egress gate between the client and Capgemini environments.
• Own encryption and secrets: Cloud KMS with customer-managed keys, Secret Manager, and key rotation.
• Run Sensitive Data Protection (DLP) scanning and de-identification at the landing boundary, with audit logging and retention for PII reads.
• Provide the control evidence that supports GLBA, Fair Lending, UDAAP, and TCPA/CAN-SPAM alignment.
• Operate the data services: Cloud Storage lifecycle and retention, BigQuery administration, Pub/Sub, Dataflow, Datastream, and Spanner.
• Operate the application tier: Cloud Run services, Artifact Registry, Cloud Build, Cloud Scheduler, and Workflows, including run-time settings, scaling, and concurrency.
• Provide the foundation Databricks on Google Cloud Platform needs: projects, VPC, service accounts, and GCS buckets.
• Provision everything as code with Terraform, with CI/CD promotion gates, policy-as-code checks, and drift detection.
• Own release management for Cloud Run services: revisions, traffic splitting, rollback, and image hygiene.
• Reliability, Cost & Observability: Own Cloud Logging, Monitoring, and Trace: service-level objectives, alerting, runbooks, and incident response.
• Own disaster recovery and high availability design: backup, regional and multi-region choices, and RPO and RTO targets.
• Own FinOps: billing export to BigQuery, budgets and alerts, labels, committed use and reservation decisions, and cost allocation per tenant.
• Meet the serving contract the agentic layer depends on: predictable latency and per-client isolation.

Skills

Cloud engineering

GCP fluency

Terraform & CI/CD

GCP security

Observability

Python or Bash

BigQuery SQL

Regulated industries

Client-facing delivery

Job description

Capgemini America, Inc. is seeking a seasoned Google Cloud Platform engineer to design and run the foundation, landing zone, and data/app services across multiple tenants on GCP.

You will own IAM, networking, encryption, DLP, and observability, while delivering infrastructure as code with Terraform and CI/CD. The role emphasizes security engineering, regulated industry experience, and client-facing delivery, with a focus on reliability, cost control, and multi-tenant isolation.