GCP Architect

Remote Role

Job Description:

GCP Organization & Multi-Tenant Foundation

Own the GCP organization design end-to-end: folder hierarchy (Platform-Infrastructure, Customer-Hosting/Americas/EMEA/APAC, Engineering, OF, SE, PM, project naming conventions, IAM group model (sav-eic-* Google Groups - Least-privilege role bindings), and Organization Polloy framework (region constraints, external IP restrictions, SA key prevention, domain-restricted sharing, uniform bucket access)

Define and document the per-customer tenant isolation model: dedicated GCP project + VPC

+ GKE cluster per environment (prod/nonprod) - full billing, permission, and operational isolation. Own trade-off analysis between this model and namespace-level isolation as customer count grows

Resolve the critical open gaps in the current architecture: IPAM tooling selection, ArgoCD ...