Lead Cloud Technical Architect - GCP

About the Company

Make an impact with NTT DATA. Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it's a place where you can grow, belong and thrive.

About the Role

We are seeking a senior Cloud Architect Lead with deep Google Cloud Platform (GCP) expertise to design and govern enterprise cloud architectures for large-scale transformation programs. This role requires 5+ years of cloud architecture experience with 3+ years of hands-on GCP specialization. The successful candidate will own the design of GCP landing zones, establish architecture standards, and provide technical leadership to engineering teams. You will drive architecture decisions across compute, networking, security, data, and observability domains while mentoring engineers and ensuring alignment with cloud best practices, organizational standards, and security/compliance requirements.

Key Responsibilities

• GCP Landing Zone Design & Governance: Design and govern enterprise GCP landing zone architecture including organization hierarchy, folder structures, project organization, and shared services. Establish architecture standards, policies, and guardrails to ensure consistent, secure, scalable cloud environments.
• Cloud Architecture Design Leadership: Lead the design of target cloud architectures for migration programs, spanning compute, networking, storage, databases, and application platforms. Make critical architecture decisions balancing performance, cost, security, and operational requirements.
• Project Hierarchy & Organization Design: Design GCP project hierarchy, resource organization, and shared VPC architectures. Establish patterns for multi-team, multi-environment deployments with clear isolation, governance, and resource management.
• Networking Architecture: Design VPC, Shared VPC, and hybrid connectivity architectures. Define network segmentation, routing strategies, load balancing patterns, Cloud NAT configurations, and network security controls. Ensure network scalability and high availability.
• Identity & Access Management (IAM) Strategy: Design IAM hierarchies, service accounts, and role-based access control (RBAC) frameworks. Establish least-privilege principles, cross-environment access patterns, and identity federation strategies.
• Security Baseline & Compliance: Design security baselines including KMS key management, Secret Manager configuration, Cloud Armor policies, VPC Service Controls, and security monitoring. Ensure architectures meet compliance requirements (SOC 2, HIPAA, PCI-DSS, regulatory standards).
• Compute Architecture (GKE & GCE): Design container and virtual machine deployment architectures. Establish GKE cluster designs, node configurations, workload identity, and auto-scaling patterns. Define GCE image management and VM deployment strategies.
• Data Platform Architecture: Design Cloud SQL, Cloud Storage, and data warehouse architectures. Establish data isolation patterns, backup/disaster recovery strategies, and cost optimization approaches for data platforms.
• Observability & Monitoring Design: Architect Cloud Logging, Cloud Monitoring, and observability solutions. Design logging centralization, metric collection strategies, alerting policies, and dashboarding approaches for operational visibility.
• Hybrid & Multi-Cloud Connectivity: Design hybrid connectivity solutions including Cloud Interconnect, VPN, and service mesh patterns. Establish patterns for on-premises integration, DNS resolution, and traffic management.
• Infrastructure-as-Code & Automation: Champion infrastructure-as-code practices using Terraform. Design reusable modules, deployment patterns, and CI/CD integration for infrastructure automation across environments.
• Migration Architecture Design: Design cloud migration architectures for lift-and-shift, re-platforming, and refactoring scenarios. Establish migration patterns, cutover strategies, and validation approaches for infrastructure and applications.
• Technical Leadership & Mentoring: Provide technical leadership to engineering teams. Mentor cloud engineers on GCP best practices, architecture patterns, and technical decision-making. Conduct architecture reviews and design discussions.
• Architecture Review & Quality Assurance: Review infrastructure code, designs, and implementations against architecture standards. Ensure adherence to security, performance, cost, and operational excellence principles. Drive continuous improvement.
• Cost Optimization & Performance Tuning: Design cost-optimization strategies leveraging GCP pricing, committed use discounts, and resource optimization. Define performance baselines, establish tuning practices, and drive continuous optimization.
• Documentation & Knowledge Transfer: Document architecture decisions, design patterns, and operational runbooks. Create architecture diagrams, design guides, and technical documentation for teams and stakeholders.
• Stakeholder Communication & Alignment: Communicate architecture designs to technical and non-technical stakeholders. Present architecture trade-offs, recommendations, and risk mitigation strategies. Ensure alignment with business and technical requirements.

Qualifications

• Minimum 5 years of professional cloud architecture experience
• Minimum 3+ years of hands-on Google Cloud Platform (GCP) architecture and implementation experience
• Deep expertise in GCP core services including Compute Engine (GCE), Google Kubernetes Engine (GKE), Cloud SQL, Cloud Storage, and networking
• Expert-level knowledge of GCP networking (VPC, Shared VPC, Cloud NAT, Load Balancing, Cloud Armor, Cloud Interconnect, Cloud VPN)
• Strong understanding of IAM, KMS, Secret Manager, and GCP security services and best practices
• Proficiency with infrastructure-as-code tools, particularly Terraform, for GCP resource management
• Experience designing observability solutions