Cloud Architect

Job Summary

We are seeking an experienced Senior Cloud Engineer/Architect with 10+ years of experience in infrastructure engineering, cloud platforms, Kubernetes, automation, and DevSecOps. The ideal candidate will have strong hands-on expertise in Google Cloud Platform (GCP), cloud foundation design, landing zone implementation, Infrastructure as Code (IaC), and enterprise Kubernetes platforms.

The candidate will be responsible for designing, implementing, and maintaining secure, scalable, resilient, and cost-efficient cloud environments. This role requires expertise in GCP security controls, Organization Policies, Security Command Center (SCC), Terraform, and Google Kubernetes Engine (GKE), including migrating workloads from Tanzu Kubernetes Grid Integrated (TKGI) to GKE.

The role also involves production support, incident management, root cause analysis, observability, reliability engineering, and collaboration with architecture, development, and security teams to support business-critical applications, analytics, and AI/ML-related workloads.

Key Responsibilities

1. Google Cloud Platform (GCP)Engineering

• Design, build, and maintain secure and scalable GCP cloud infrastructure.
• Develop and implement GCP landing zones, cloud foundations, and standardized infrastructure patterns.
• Establish governance controls, guardrails, IAM policies, and Organization Policies.
• Implement and manage Security Command Center (SCC) controls to improve cloud security posture.
• Optimize cloud infrastructure for availability, performance, security, and cost efficiency.

2. Infrastructure as Code and Automation

• Develop and maintain reusable Terraform modules for provisioning and managing GCP resources.
• Implement infrastructure automation and configuration management best practices.
• Integrate security and compliance controls into infrastructure provisioning workflows.
• Maintain version-controlled infrastructure code and automated deployment pipelines.
• Promote standardization and repeatability across cloud environments.

3. Kubernetes and Container Platform Engineering

• Design, deploy, and manage production-grade Google Kubernetes Engine (GKE) clusters.
• Implement Kubernetes best practices for security, scalability, availability, networking, and workload management.
• Lead or support the migration of containerized applications from Tanzu Kubernetes Grid Integrated (TKGI) to GKE.
• Troubleshoot complex Kubernetes, container runtime, networking, and application deployment issues.
• Establish platform engineering standards for containerized workloads and developer enablement.

4. CI/CD and DevSecOps

• Design, implement, and maintain CI/CD pipelines using Concourse, Bamboo, GitLab CI/CD, Cloud Build, and Cloud Deploy.
• Automate infrastructure provisioning, application deployment, and release management.
• Integrate security scanning, policy enforcement, and compliance checks into CI/CD pipelines.
• Improve deployment consistency, release reliability, and operational efficiency.
• Collaborate with development teams to implement secure software delivery practices.

5. Site Reliability Engineering and Observability

• Implement monitoring, logging, alerting, and observability solutions using Dynatrace, Prometheus, and Grafana.
• Apply SRE principles to improve service availability, reliability, and performance.
• Define and monitor service-level indicators (SLIs), service-level objectives (SLOs), and reliability metrics where applicable.
• Automate operational tasks and repetitive support activities.
• Identify performance bottlenecks and implement proactive measures to reduce incidents and downtime.

6. Production Support and Incident Management

• Act as a senior escalation point for complex infrastructure, cloud, and Kubernetes production issues.
• Lead incident investigations, troubleshooting, root cause analysis, and permanent corrective actions.
• Coordinate with cross-functional teams to resolve critical incidents and minimize business impact.
• Identify recurring operational issues and implement preventive automation and reliability improvements.
• Contribute to operational documentation, runbooks, knowledge sharing, and continuous service improvement.

7. Security, Governance, and Collaboration

• Partner with cloud architects, application developers, security teams, and platform engineering teams.
• Implement cloud security and governance standards across infrastructure and container platforms.
• Support compliance initiatives, vulnerability remediation, and security posture improvements.
• Enable scalable cloud platforms for business-critical applications, data analytics, and AI/ML-adjacent workloads.
• Mentor engineers and promote engineering best practices across cloud and Kubernetes environments.

Required Technical Skills

• Cloud Platform: Google Cloud Platform (GCP), cloud foundations, landing zones, cloud governance.
• GCP Security: Organization Policies, guardrails, Security Command Center (SCC), IAM.
• Infrastructure as Code: Terraform, reusable modules, automated provisioning.
• Container Platforms: Kubernetes, Google Kubernetes Engine (GKE), Tanzu Kubernetes Grid Integrated (TKGI), containerization.
• CI/CD: Concourse, Bamboo, GitLab CI/CD, Cloud Build, Cloud Deploy.
• Monitoring and Observability: Dynatrace, Prometheus, Grafana.
• DevSecOps: Automated security controls, policy enforcement, secure deployment pipelines.
• Reliability Engineering: Incident management, root cause analysis, production troubleshooting, SRE principles.
• Automation: Infrastructure automation, operational scripting, deployment standardization.

Qualifications and Experience

• 10+ years of experience in infrastructure engineering, cloud engineering, platform engineering, or related technical roles.
• Strong hands-on experience with GCP infrastructure and cloud-native services.
• Proven experience implementing GCP landing zones, governance guardrails, and security controls.
• Practical experience deploying and operating production-grade GKE environments.
• Experience migrating Kubernetes workloads from TKGI or comparable enterprise container platforms to GKE.
• Strong Terraform and Infrastructure as Code expertise.

Skills

Machine Learning, Terraform, Security, Kubernetes, Cloud Security, Governance, Cloud Native Architecture, Google Cloud Platform, Artificial Intelligence, Google Kubernetes Engine (GKE), Infrastructure Automation, CI/CD, Availability Management, Site Reliability Engineering, GitLab, Production Environment, Grafana, DevSecOps, Incident Management, Infrastructure Support