Senior GCP Cloud Architect — Governance, Urbanization, and Foundation Evolution

Project overview

For a major energy player

Mission Context

The client is looking for a senior GCP Cloud Architect responsible for defining, designing, and evolving the architecture of the Landing Zone and the Google Cloud Platform infrastructure foundation.

The consultant will act as an architectural reference and advisor to technical teams and information system stakeholders. They must ensure architectural choices are consistent with business needs, enterprise standards, and requirements for security, performance, availability, scalability, and cost control.

Main Responsibilities

The architect will be responsible for:

Governance and Support

The architect will be required to produce and maintain:

Technical Skills Required

The profile must possess advanced expertise in:

Certifications

Mandatory certification:

Recommended certification:

• defining the principles and architecture standards for the GCP foundation;
• designing the organization of environments, projects, folders, and areas of responsibility;
• defining network, security, identity, and hybrid connectivity architecture models;
• contributing to the urbanization of the GCP infrastructure foundation;
• defining deployment patterns and reference architectures;
• guiding technical choices related to Compute Engine, Cloud Run, Cloud Storage, Cloud SQL, BigQuery, and Firestore;
• defining IAM standards, service accounts, Workload Identity, KMS, and Secret Manager;
• designing security architectures with Cloud Armor, Cloud IDS, firewall rules, and bastions;
• defining principles for observability, log centralization, and monitoring;
• integrating requirements for resilience, backup, recovery, and high availability;
• contributing to the definition of cost management rules, labels, and cost allocation;
• validating Terraform modules and industrialization patterns;
• supporting DevOps teams in translating architectures into operational solutions;
• conducting or managing architecture reviews;
• ensuring technological and regulatory watch on GCP services;
• verifying project adherence to foundation standards;
• identifying gaps, technical risks, and architectural debt;
• proposing evolution trajectories and remediation plans;
• advising teams on infrastructure, security, and operational choices;
• contributing to PI Planning, architecture committees, and governance bodies;
• ensuring knowledge transfer and documentation of decisions.
• Cloud architecture principles;
• GCP foundation standards;
• reference architectures;
• technical architecture documents;
• flow and dependency matrices;
• security and identity standards;
• rules for using GCP services;
• landing project models;
• naming, labeling, and cost management rules;
• architecture decisions and their justifications;
• foundation evolution roadmaps;
• presentation and skills transfer materials.
• Google Cloud Platform and Landing Zone design;
• Enterprise architecture and infrastructure urbanization;
• GCP organization models, projects, folders, and resource hierarchies;
• VPC, Subnets, Peering, Cloud NAT, Cloud VPN, and hybrid DNS;
• IAM, Service Accounts, Workload Identity, and identity federation;
• Cloud KMS, Secret Manager, Cloud Armor, and Cloud IDS;
• Compute Engine, Cloud Run, Cloud Storage, BigQuery, Cloud SQL, and Firestore;
• Cloud Logging, Cloud Monitoring, Cloud Trace, and Error Reporting;
• Terraform and the design of industrialized modules;
• GitLab CI and Cloud Build;
• Active Directory / LDAP integration;
• bastions, jump hosts, and secure access;
• Cloud security, resilience, high availability, and incident recovery;
• FinOps, budgets, alerts, labels, and cost allocation;
• DevOps practices, ITIL, and technical governance.
• Google Cloud Professional Cloud Architect;
• HashiCorp Terraform Professional.
• Google Cloud Professional Cloud DevOps Engineer.

Project details

• Start: flexible
• Remote: hybrid
• Location: 92000 Nanterre, France, FR
• Rate: 90-90 EUR/h
• Languages: French