Senior GCP Architect / Cloud Engineer

Exit83 • Seattle, WA

32d

About The Position

We're looking for a Senior GCP Architect to step into a technical lead role for a large-scale cloud platform modernization initiative. This is not a background contributor role, you'll help shape the GCP entitlement and access control architecture from the ground up, guide the design of a self-serve Landing Zone, and co-lead the delivery of a Platform Ops Portal used by engineering teams across the organization.

You will contribute to scoping and technical direction early, and carry that ownership through implementation and enablement. If you're a senior GCP engineer who thrives in complex, regulated environments and wants real influence over how a major bank builds its cloud platform, this is the role.

Requirements

• 7+ years in cloud engineering or architecture, with at least 4 years hands-on with GCP in a lead or architect capacity
• Deep expertise in GCP IAM, including workload identity, service account management, custom roles, and policy inheritance
• Proven experience designing Landing Zones or platform engineering frameworks on GCP (Cloud Foundation Toolkit, blueprints, or equivalent)
• Experience building or contributing to internal developer portals or Platform Ops tooling (Backstage, custom portals, or similar)
• Strong command of Infrastructure-as-Code, primarily Terraform on GCP
• Ability to engage directly with client stakeholders and translate technical architecture decisions into clear recommendations

Nice To Haves

• Experience with GCP Security Command Center, Chronicle, or Access Transparency
• Familiarity with GCP Assured Workloads or sovereign cloud configurations for regulated industries
• Background in multi-cloud environments where GCP is the primary landing zone
• Google Cloud Professional certifications (Cloud Architect, Security Engineer, or equivalent)

Responsibilities

• Lead the architecture and implementation of GCP Entitlement and Access Control systems, including IAM policies, service account governance, and least-privilege access models
• Design and deliver a self-serve Landing Zone framework that enables Platform Engineering teams to provision and manage cloud environments consistently and at scale
• Co-lead delivery of a Platform Ops Portal, covering management functions such as environment provisioning, access requests, cost visibility, and operational workflows
• Partner with client engineering and security teams to align the access control model with regulatory and compliance requirements in a financial services context
• Define and enforce GCP governance guardrails, including organization policies, resource hierarchy design, and VPC Service Controls
• Drive technical review, identify gaps, and shape the delivery approach before the project kicks off
• Enable internal teams through documentation, runbooks, and knowledge transfer that outlast the engagement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed