{"id":3357709,"url":"https://alion.io/job/saic-google-cloud-architect","title":"Google Cloud Architect","company":{"id":58788,"name":"SAIC","domain":"saic.com","url":"https://alion.io/company/saic","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":78,"open_postings":82,"ghost_share":0,"stale_share":0.89,"repost_share":0.012,"time_to_fill_p50_days":24,"computed_at":"2026-11-04T06:34:25Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":139000,"max_usd":271000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":589},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"Gemini","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Keycloak","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Palo Alto NGFW","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Vertex AI","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Git","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-27T15:36:15Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-04T17:26:49Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Position Overview\nThe Senior GCP Architect serves as the principal technical authority and platform strategist across the DOT enterprise cloud ecosystem. Operating within OST Shared Services, this role provides technical governance and architectural oversight for independent GCP development teams. The candidate is responsible for reviewing and approving architectural changes, enforcing zero-trust landing zone patterns, and engineering an enterprise Continuous Authorization to Operate (ATO) framework across Commercial, FedRAMP Moderate, and FedRAMP High Assured Workloads enclaves.\nKey Responsibilities\nGCP Enterprise Architecture & IaC Blueprinting\nDesign, maintain, and govern multi-folder GCP landing zones using Assured Workloads for FedRAMP Moderate and FedRAMP High compliance boundaries. Enforce organizational policies, data residency constraints, and CMEK governance via Cloud KMS.\nMaintain clear technical boundaries separating OST Shared Services management responsibilities (Palo Alto MIG firewalls, HA VPN tunnels, central Cloud DNS, Infoblox, Network Connectivity Center hubs) from tenant Mode application workloads.\nWork with development teams to author and manage enterprise-grade, modular Terraform code. Standardize JSON/YAML parameter structures to automate landing zone vending, subnet allocation, and zero-trust IAM roles.\nImplement VPC Service Controls perimeters, Workload Identity Federation, Service Account governance, and fine-grained Role-Based Access Control (RBAC) across shared and tenant projects.\nDevSecOps Architecture, CI/CD, & Continuous Compliance\nArchitect enterprise CI/CD deployment pipelines using GitHub Actions (utilizing self-hosted runners in isolated management VPCs) and Jenkins. Integrate automated SAST, DAST, and dependency scanning into pull request workflows.\nEstablish continuous authorization baselines aligning with NIST SP 800-53, FedRAMP High/Moderate, and federal directives. Automate real-time compliance validation and drift detection via IaC execution pipelines.\nDesign centralized logging and monitoring pipelines, configuring Cloud Logging sinks to route security audit and network telemetry to Pub/Sub, Dataflow, and downstream log storage (Elastic Cloud, Splunk).\nUnified Cloud Portal Integration & API Orchestration\nLead the architectural integration between user-facing web applications and backend GCP API execution platforms for self-service infrastructure provisioning.\nDefine end-to-end orchestration standards for automated user requests, including project vending, dynamic terraform plan and terraform apply executions, state tracking, and error handling.\nImplement cross-boundary authentication protocols mapping user credentials to GCP resources using SAML 2.0, Entra ID, Keycloak, and OIDC federated single sign-on.\n4. Enterprise AI Ecosystem & Model Governance\nFormulate architectural standards for integrating enterprise AI services, including Gemini foundation models, Vertex AI endpoints, and custom generative AI pipelines within Assured Workloads enclaves.\nEstablish secure private access patterns using Private Service Connect (PSC), VPC Service Controls, and Customer-Managed Encryption Keys (CMEK) to protect training datasets and model interaction history.\nOversee ethical AI compliance, prompt security boundaries, data leakage prevention (DLP), and continuous monitoring of AI payload invocations.\n Required Qualifications & Experience\nExperience Level: 8+ years of progressive experience in cloud engineering, IT infrastructure, and DevSecOps, including 4+ years acting as a Lead GCP Engineer or Cloud Architect within complex multi-tenant enterprise environments.\nGCP Architecture Proficiency: Proven track record of architecting enterprise GCP environments, including Shared VPC topologies, Interconnect/HA VPN routing, Palo Alto NGFW integration, VPC-SC perimeters, and GKE cluster governance.\nCompliance & Security Controls: Practical understanding of FedRAMP Moderate/High compliance frameworks, Assured Workloads boundaries, DoD Iron Bank container assets, and continuous monitoring practices.\nPreferred Qualifications & Clearances\n Multi-Cloud Awareness: Operational architectural understanding of AWS (GovCloud/Commercial) or Microsoft Azure to manage cross-cloud identity federation and hybrid network connectivity.\nTerraform Engineering: Expertise in modular Terraform design, remote state administration, plan/apply automation pipelines, dynamic data parsing, and drift resolution is desirable but not required. \n DevSecOps & Pipeline Automation: Advanced knowledge of GitHub Actions (including runner pool architecture), Jenkins, and Git branching strategies for immutable cloud deployments.\nSecurity Clearance: Must possess or be eligible to obtain a Public Trust\nPreferred Certifications\nGoogle Cloud Certified Professional Cloud Architect (Highly Preferred)\nGoogle Cloud Certified Professional Cloud Security Engineer\nNote: Candidate must be a U.S. citizen and the ability to obtain a public trust","description_format":"text","description_chars":5006,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","Systems Integrators","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-27T20:25:32Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.625,"p_room":1,"age_days":7,"expected_fill_days":24,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/saic-google-cloud-architect","json_url":"https://alion.io/job/saic-google-cloud-architect.json","meta":{"generated_at":"2026-11-04T19:37:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30229,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58788},"rest":"https://alion.io/mcp/rest/get_company?id=58788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsaic-google-cloud-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsaic-google-cloud-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsaic-google-cloud-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/saic-google-cloud-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsaic-google-cloud-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3357709}},{"tool":"search_jobs","arguments":{"company":"saic.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3357709},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}