Key Responsibilities

• Design and implement GCP Landing Zone Architecture
• Configure and manage Shared VPC and Hub-and-Spoke Networking topologies
• Set up and manage HA VPN and Cloud Interconnect for hybrid connectivity
• Manage Cloud IAM and Identity Federation across GCP environments
• Integrate Entra ID, OIDC, and SAML for identity and access management
• Utilize Security Command Center and Organization Policy Service for governance
• Implement VPC Service Controls, Cloud KMS, and Secret Manager for data protection
• Write and maintain Infrastructure as Code using Terraform
• Drive DevSecOps practices including CI/CD pipeline security and Binary Authorization
• Integrate security tools such as Splunk, Palo Alto, and CyberArk
• Perform Azure to GCP security control mapping for migration projects
• Provide FinOps guidance, cloud cost monitoring, and client-facing architecture documentation

Requirements

• 6+ years of experience in cloud architecture and security, with strong focus on GCP
• Hands-on expertise in GCP Landing Zone Architecture
• Proficiency in Shared VPC, Hub-and-Spoke Networking, HA VPN, and Cloud Interconnect
• Deep knowledge of Cloud IAM, Identity Federation, Entra ID, OIDC, and SAML
• Experience with Security Command Center and Organization Policy Service
• Strong understanding of VPC Service Controls, Cloud KMS, and Secret Manager
• Proficiency in Terraform and Infrastructure as Code practices
• Experience with DevSecOps, CI/CD pipelines, and Binary Authorization
• Hands-on experience integrating Splunk, Palo Alto, and CyberArk
• Ability to perform Azure to GCP security control mapping
• Experience with FinOps, cloud cost monitoring, and client-facing architecture
• GCP Professional Cloud Architect and/or Professional Cloud Security Engineer certification required
• GCP Professional Cloud Network Engineer and/or Professional DevOps Engineer certification preferred
• Willingness to work night shift: 6:30 PM – 3:30 AM IST
• Must be located in India

Skills Required