Role GCP Enterprise Architect (Platform Automation Architect, GCP)
Practice Trace3 — Cloud Solutions Group, Digital · Google Cloud Practice
Workstream Product Teams Support
Location Remote (U.S.)
Reports To Trace3 Google Cloud Practice / Engagement leadership
43647
Role Overview
Serves as the dedicated enterprise architect for Gap's Google Cloud program, evaluating incoming use cases holistically and defining the most appropriate end-to-end solution design across security, networking, and infrastructure automation. This Trace3-led role translates business and technical requirements into scalable, secure, and supportable cloud automation patterns; produces documented, repeatable architecture artifacts; and coordinates required changes across dependent teams to completion. The architect strengthens the overall solution-design process, improves cross-functional alignment, and accelerates delivery of Gap's cloud initiatives.
Key Responsibilities
• Evaluate incoming use cases holistically and define end-to-end solution designs spanning security, networking, and infrastructure automation.
• Translate business and technical requirements into scalable, secure, and supportable cloud automation patterns.
• Produce documented, repeatable architecture artifacts and reference designs that delivery teams can operationalize.
• Partner across Gap's InfoSec, Network, and Infrastructure Automation teams to ensure designs align across all foundational pillars and can be operationalized effectively.
• Coordinate required changes across dependent teams and drive them to completion.
• Provide architectural direction across the program's technical domains — network security architecture, foundational GCP organization and IAM, cloud security posture management, Terraform/IaC structure, and the Gemini Enterprise Agent (Vertex AI) platform.
• Guide persona-based least-privilege IAM design, organization policy, VPC Service Controls, Private Service Connect, and CMEK/encryption standards.
• Establish Terraform architecture standards — separation of global/shared policy from perimeter-specific implementation, shared-module strategy, drift detection, and CI/CD policy-as-code gating.
• Provide architectural guidance to the NCC network transition and hybrid-connectivity direction (including Cross-Cloud Interconnect to Azure) where it intersects platform automation.
• Support project governance — participate in design reviews, secure architecture sign-off, and maintain alignment to timelines and scope.
Primary Deliverables
• Architecture designs and supporting documentation for approved use cases.
• Reusable reference solution patterns spanning security, networking, and infrastructure automation.
• Persona-based IAM / least-privilege role design and foundation policy recommendations.
• Terraform repository and structure design guidance (global vs. shared policy separation, module strategy, drift detection, IaC security scanning).
• Design artifacts for the Gemini Enterprise Agent Platform (Agent Engine, RAG Engine, Vector Search), including governance and threat-model considerations.
Required Qualifications
• Extensive enterprise / cloud architecture experience with deep, hands-on Google Cloud Platform expertise.
• Demonstrated ability to own end-to-end solution design across security, networking, and infrastructure automation.
• Expert-level Terraform / Infrastructure-as-Code design and standards.
• Strong command of GCP foundations: resource hierarchy and organization policy, IAM and least-privilege design, Shared VPC, VPC Service Controls, Private Service Connect, and CMEK.
• Experience embedding security and compliance into cloud designs (e.g., PII/PCI-regulated workloads) and cloud security posture management.
• Proven cross-functional leadership — aligning InfoSec, Network, and Infrastructure/Platform teams and driving change to completion.
• Excellent documentation, communication, and stakeholder-management skills.
Preferred Qualifications
• Google Cloud Professional certifications (Cloud Architect, Cloud Security Engineer, and/or Cloud Network Engineer).
• Vertex AI / generative-AI platform architecture — Agent Engine, RAG Engine, Vector Search, Model Armor, and Model Garden governance.
• CI/CD policy-as-code tooling (OPA/Conftest, Checkov, tfsec) and layered Terraform pipelines.
• Cloud security posture management with Prisma Cloud.
• Network Connectivity Center (NCC), hub-and-spoke fabric, and hybrid connectivity including Cross-Cloud Interconnect to Azure.
• Experience in large, regulated, enterprise-scale (e.g., retail) environments.
Core Technology Environment
Google Cloud Platform; Terraform / Infrastructure-as-Code; IAM, organization policy, Shared VPC, VPC Service Controls, Private Service Connect, and CMEK; Vertex AI / Gemini (Agent Engine, RAG Engine, Vector Search, Model Armor, Model Garden); Cloud Run; Prisma Cloud (CSPM); CI/CD policy-as-code (OPA/Conftest, Checkov, tfsec); and Network Connectivity Center with Cross-Cloud Interconnect to Azure.
Engagement Details & Working Arrangement
• Delivery model: Dedicated Trace3 consulting resource embedded with Gap's GCP program, supporting the Product Teams Support workstream alongside the broader GCP Architecture Support and NCC Transition projects.
• Location: Remote (U.S.). All work performed remotely via secure VPN/collaboration tooling.
• Hours: Normal business hours (8:00 AM – 5:00 PM client local time); occasional off-hours work by mutual agreement to support change windows.
• Security & compliance: Trace3-managed device, hard-drive encryption, two-factor authentication, and adherence to the client's remote-work protocols and information-security standards.