Role Overview
Serves as the dedicated enterprise architect for Google Cloud program, evaluating incoming use cases holistically and defining the most appropriate end-to-end solution design across security, networking, and infrastructure automation. This role translates business and technical requirements into scalable, secure, and supportable cloud automation patterns; produces documented, repeatable architecture artifacts; and coordinates required changes across dependent teams to completion. The architect strengthens the overall solution-design process, improves cross-functional alignment, and accelerates delivery of cloud initiatives.
Key Responsibilities
Evaluate incoming use cases holistically and define end-to-end solution designs spanning security, networking, and infrastructure automation.
Translate business and technical requirements into scalable, secure, and supportable cloud automation patterns.
Produce documented, repeatable architecture artifacts and reference designs that delivery teams can operationalize.
Partner across InfoSec, Network, and Infrastructure Automation teams to ensure designs align across all foundational pillars and can be operationalized effectively.
Coordinate required changes across dependent teams and drive them to completion.
Provide architectural direction across the program's technical domains network security architecture, foundational Google Cloud Platform organization and IAM, cloud security posture management, Terraform/IaC structure, and the Gemini Enterprise Agent (Vertex AI) platform.
Guide persona-based least-privilege IAM design, organization policy, VPC Service Controls, Private Service Connect, and CMEK/encryption standards.
Establish Terraform architecture standards separation of global/shared policy from perimeter-specific implementation, shared-module strategy, drift detection, and CI/CD policy-as-code gating.
Provide architectural guidance to the NCC network transition and hybrid-connectivity direction (including Cross-Cloud Interconnect to Azure) where it intersects platform automation.
Support project governance participate in design reviews, secure architecture sign-off, and maintain alignment to timelines and scope.
Primary Deliverables
Architecture designs and supporting documentation for approved use cases.
Reusable reference solution patterns spanning security, networking, and infrastructure automation.
Persona-based IAM / least-privilege role design and foundation policy recommendations.
Terraform repository and structure design guidance (global vs. shared policy separation, module strategy, drift detection, IaC security scanning).
Design artifacts for the Gemini Enterprise Agent Platform (Agent Engine, RAG Engine, Vector Search), including governance and threat-model considerations.
Required Qualifications
Extensive enterprise / cloud architecture experience with deep, hands-on Google Cloud Platform expertise.
Demonstrated ability to own end-to-end solution design across security, networking, and infrastructure automation.
Expert-level Terraform / Infrastructure-as-Code design and standards.
Strong command of Google Cloud Platform foundations: resource hierarchy and organization policy, IAM and least-privilege design, Shared VPC, VPC Service Controls, Private Service Connect, and CMEK.
Experience embedding security and compliance into cloud designs (e.g., PII/PCI-regulated workloads) and cloud security posture management.
Proven cross-functional leadership aligning InfoSec, Network, and Infrastructure/Platform teams and driving change to completion.
Excellent documentation, communication, and stakeholder-management skills.
Preferred Qualifications
Google Cloud Professional certifications (Cloud Architect, Cloud Security Engineer, and/or Cloud Network Engineer).
Vertex AI / generative-AI platform architecture Agent Engine, RAG Engine, Vector Search, Model Armor, and Model Garden governance.
CI/CD policy-as-code tooling (OPA/Conftest, Checkov, tfsec) and layered Terraform pipelines.
Cloud security posture management with Prisma Cloud.
Network Connectivity Center (NCC), hub-and-spoke fabric, and hybrid connectivity including Cross-Cloud Interconnect to Azure.
Experience in large, regulated, enterprise-scale (e.g., retail) environments.
Core Technology Environment
Google Cloud Platform; Terraform / Infrastructure-as-Code; IAM, organization policy, Shared VPC, VPC Service Controls, Private Service Connect, and CMEK; Vertex AI / Gemini (Agent Engine, RAG Engine, Vector Search, Model Armor, Model Garden); Cloud Run; Prisma Cloud (CSPM); CI/CD policy-as-code (OPA/Conftest, Checkov, tfsec); and Network Connectivity Center with Cross-Cloud Interconnect to Azure.
Engagement Details & Working Arrangement
Delivery model: Dedicated consulting resource embedded with Google Cloud Platform program, supporting the Product Teams Support workstream alongside the broader Google Cloud Platform
Architecture Support and NCC Transition projects.
Location: Remote (U.S.). All work performed remotely via secure VPN/collaboration tooling.
Engagement term: June 15, 2026 through January 31, 2027.
Hours: Normal business hours (8:00 AM 5:00 PM client local time); occasional off-hours work by mutual agreement to support change windows.
Security & compliance: managed device, hard-drive encryption, two-factor authentication, and adherence to the client's remote-work protocols and information-security standards.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
- Dice Id: cxbcsi
- Position Id: Job43647
- Posted 30+ days ago
Never miss an opportunity! Create an alert based on the job you applied for.
