Overview
We are seeking a GCP Cloud Architect to play a critical role in a major cloud-transformation program within central government. This position primarily focuses on evaluating an existing Google Cloud Platform (GCP) estate and architecting its future state—including governance frameworks and target operating models. The contractor will collaborate with various stakeholders and ensure the strategic development of an enterprise-scale GCP environment while maintaining oversight of architecture and governance rather than hands-on engineering tasks.
Responsibilities
- Lead the current-state assessment of the existing GCP estate, governance and operating arrangements.
- Define the target landing-zone architecture, GCP organization hierarchy and folder structure.
- Design organization policies, governance controls and role-based access models.
- Develop a cloud operating model covering ownership, administration, assurance and service management.
- Define the identity strategy across Cloud Identity, Workforce Identity Federation and Entra ID.
- Design security architecture aligned with Secure by Design, NCSC guidance and the Cyber Assessment Framework.
- Establish the FinOps approach, including billing hierarchies, cost controls and chargeback mechanisms.
- Define the operational transition model for transferring platform ownership and administration.
Requirements
- Extensive enterprise or lead architecture experience across large-scale GCP environments.
- Strong experience managing GCP Organizations, folder hierarchies, organization policies and landing zones.
- Experience designing enterprise cloud-governance frameworks and target operating models.
- Strong knowledge of identity and access management, including Cloud Identity, Workforce Identity Federation and Entra ID integration.
- Experience applying Secure by Design principles, NCSC guidance and CAF requirements.
- Experience designing FinOps operating models, billing structures and chargeback approaches.
- Strong stakeholder-management skills across architecture, cyber security, operations and senior leadership.
- Active SC clearance or eligibility to obtain it; Google Professional Cloud Architect, TOGAF, CISSP or CCSP certification would be advantageous.