Role responsibilities
- Assess the existing GCP organisation, projects, IAM, security controls and platform configuration.
- Provide technical input into the target landing-zone architecture and governance model.
- Review organisation policies, project governance and role-based access controls.
- Evaluate audit logging, Security Command Center and wider cloud security controls.
- Develop proof-of-concepts for landing zones, project vending and governance capabilities.
- Design Infrastructure as Code using Terraform and Google Cloud Fabric.
- Support CI/CD automation using GitHub Actions or comparable tooling.
- Identify technical risks, dependencies and implementation requirements, providing clear recommendations for transition and delivery.
Key experience and requirements
- Active SC clearance.
- Extensive enterprise Google Cloud Platform engineering experience, including organisation and project administration at scale.
- Strong knowledge of GCP IAM, organisation policies, audit logging and Security Command Center.
- Advanced Terraform and Infrastructure as Code capability.
- Experience using Google Cloud Fabric or comparable enterprise landing-zone frameworks.
- Experience designing or implementing GCP landing zones and automated project-vending capabilities.
- Strong CI/CD knowledge, ideally including GitHub Actions.
- Experience delivering secure cloud platforms within UK government, the wider public sector or another highly regulated environment.