Full Time Architect

GCP Architect

Rosemead, CA

Fulltime

• Multi-cloud platforms: Strong hands-on knowledge of AWS, Microsoft Azure, and Google Cloud Platform across IaaS, PaaS, SaaS, and container services.
• Architecture and design: Design scalable, secure, resilient, highly available, and cost-effective multi-cloud and hybrid-cloud solutions using well-architected principles.
• Cloud foundation and governance: Design landing zones, account/subscription/project hierarchies, identity models, tagging standards, policy guardrails, resource organization, and cloud operating models.
• Compute, storage, and databases: Experience with virtual machines, autoscaling, load balancers, object/block/file storage, relational and NoSQL databases, serverless services, and managed platform services.
• Networking: Strong knowledge of VPC/VNet design, routing, DNS, firewalls, NAT, private endpoints, load balancing, transit connectivity, VPN, AWS Direct Connect, Azure ExpressRoute, and Google Cloud Interconnect.
• Security and compliance: Identity and access management, RBAC, least privilege, secrets and key management, encryption, zero-trust controls, vulnerability management, security monitoring, and compliance with CIS, NIST, FedRAMP, and applicable regulatory standards.
• Containers and orchestration: Docker and Kubernetes, including EKS, AKS, and GKE; container registries, Helm, ingress, service scaling, security, and cluster operations.
• Infrastructure as Code and automation: Terraform, CloudFormation, Bicep/ARM, Ansible, cloud CLIs, PowerShell, Python, and automated provisioning through reusable modules and pipelines.
• DevOps and DevSecOps: CI/CD design using GitHub Actions, GitLab, Jenkins, Azure DevOps, AWS native tools, and Google Cloud build/deployment services; integrate code quality, security scanning, approvals, and policy checks.
• Migration and modernization: Assess application dependencies, define 6R/7R migration strategies, plan migration waves, execute cutover and rollback, and modernize workloads using containers, microservices, serverless, and managed services.
• Observability and operations: Centralized logging, metrics, tracing, dashboards, alerting, event management, service health monitoring, SLI/SLO practices, incident response, problem management, and root-cause analysis.
• Reliability and disaster recovery: Define RTO/RPO, backup and retention, multi-zone/multi-region patterns, failover, recovery testing, business continuity, and chaos/resilience validation.
• FinOps: Cost allocation, budgets, forecasts, anomaly detection, rightsizing, scheduling, storage optimization, commitment discounts, reserved capacity, Savings Plans, showback/chargeback, TCO, and ROI analysis.
• Data and integration: Experience with APIs, messaging, event-driven architecture, data migration, integration services, data lakes, analytics platforms, and cross-cloud data movement.
• Documentation and troubleshooting: Produce HLD, LLD, architecture diagrams, standards, SOPs, runbooks, implementation plans, and operati onal handover documents; troubleshoot complex hybrid and multi-cloud incidents.

o Solution Design and Architecture Governance

o Multi-Region & High Availability Architecture

o Disaster Recovery (DR) & Business Continuity

o Hybrid Cloud & Multi-Cloud Architecture

o Cloud Landing Zone Design

o Cloud Migration & Modernization Strategies

• GCP Core Services: Compute Engine, App Engine, Cloud Run, GKE, Cloud Functions, and VMware Engine.
• GCP Cloud Architecture: Design highly available, scalable, fault-tolerant, resilient, and cost-optimized solutions.
• GCP Networking: VPC, subnets, Shared VPC, firewall rules, Cloud NAT, Cloud DNS, load balancing, VPN, Interconnect, and Network Connectivity Center.
• Identity and Security: IAM, organization policies, service accounts, Cloud KMS, Secret Manager, Security Command Center, Cloud Armor, and BeyondCorp Enterprise.
• Containers and Kubernetes: GKE architecture, cluster operations, autoscaling, service mesh, container security, and Artifact Registry.
• Storage and Databases: Cloud Storage, Persistent Disk, Filestore, Cloud SQL, AlloyDB, Spanner, Firestore, Bigtable, and Memorystore.
• Data and Analytics: BigQuery, Dataflow, Dataproc, Pub/Sub, Cloud Composer, Dataplex, and Looker.
• Migration and Modernization: Migration Center, Migrate to Virtual Machines, Database Migration Service, application assessment, landing zones, and cloud-native modernization.
• DevOps and Automation: Terraform, Infrastructure as Code, Cloud Build, Cloud Deploy, GitOps, CI/CD pipelines, and policy automation.
• Disaster Recovery: Backup and DR, regional and multi-regional designs, recovery strategies, and RTO/RPO planning.
• FinOps and Governance: Billing accounts, budgets, quotas, resource hierarchy, labels, cost allocation, optimization, compliance, and guardrails.
• AI and Machine Learning: Vertex AI, Gemini on Google Cloud, model deployment, MLOps, responsible AI, and AI security.
• Architecture Documentation: High-level and low-level designs, reference architectures, decision records, migration roadmaps, risk registers, and operational runbooks.
• Frameworks and Standards: Google Cloud Architecture Framework, Well-Architected principles, SRE, DevSecOps, data governance, privacy, and regulatory compliance.

• Translate business objectives and non-functional requirements into a practical multi-cloud strategy, target architecture, and phased roadmap.
• Conduct current-state assessments, application portfolio analysis, dependency mapping, cloud suitability reviews, and gap assessments.
• Recommend the appropriate cloud provider and services based on workload characteristics, security, compliance, performance, resiliency, data residency, portability, and cost.
• Facilitate architecture workshops, discovery sessions, design reviews, governance boards, and technical decision forums.
• Develop business cases, TCO/ROI models, estimates, migration plans, solution options, risks, assumptions, dependencies, and decision records.
• Define cloud governance, service ownership, support models, escalation paths, operational readiness criteria, and handover requirements.
• Collaborate effectively with application, data, security, network, infrastructure, DevOps, operations, finance, procurement, and vendor teams.
• Manage cloud risks, technical debt, compliance actions, architecture exceptions, and cross-platform dependencies through closure.
• Support vendor evaluation, licensing and commercial analysis, service comparison, contract discussions, and avoidance of unnecessary vendor lock-in.
• Present architecture, cost, risk, and transformation recommendations clearly to technical teams, customers, and executive stakeholders.
• Provide technical leadership, mentoring, standards, reusable patterns, best practices, and quality assurance across delivery teams.
• Work within Agile, DevOps, ITIL, and project governance models while maintaining delivery quality, schedule, scope, and stakeholder alignment. AceStack LLC