GCP Lead/Architect

Job Summary:
We are looking for a GCP Cloud Architect to lead the hybrid expansion of ABC Bank's Apigee platform to Google Cloud Platform (GCP) . The role requires deep expertise in Google Kubernetes Engine (GKE) , Apigee Hybrid , Helm-based deployments , cloud security , and high-availability architectures . The architect will be responsible for designing, implementing, and ensuring operational readiness for a scalable hybrid API management infrastructure .
Key Responsibilities:
1. Solution Design & Architecture
Define hybrid Apigee architecture leveraging GKE, Helm, and cloud-native services .
Conduct capacity planning and infrastructure sizing to meet the bank's 2500+ TPS API traffic requirements.
Develop a Platform Solution Architecture document covering networking, security, high availability, and scaling strategies.
Collaborate with enterprise architects, security teams, and business stakeholders to align cloud adoption with the bank's cloud-first strategy .
2. GKE Cluster & Apigee Hybrid Deployment
Design, deploy, and configure a multi-region, highly available GKE cluster to host Apigee Hybrid.
Implement Helm charts for automating Apigee Hybrid installation and lifecycle management.
Ensure network connectivity between on-premises infrastructure and GCP via VPN, Interconnect, or hybrid networking solutions .
Optimize ingress/egress traffic, service discovery, and DNS resolution for seamless API routing across hybrid environments.
3. Security, Compliance & Governance
Implement RBAC (Role-Based Access Control), IAM policies, and identity federation to ensure secure access management .
Ensure API security standards (OAuth, JWT, mTLS) and compliance with financial regulations (PCI-DSS, GDPR, SOC 2, etc.) .
Configure logging, monitoring, and alerting using Cloud Logging, Prometheus, Grafana, and Google Cloud Operations Suite .
Establish automated security scanning and vulnerability assessments for containerized workloads.
4. Performance, Scalability & Testing
Design horizontal and vertical scaling strategies to handle future API traffic growth beyond 2500 TPS .
Conduct performance testing, stress testing, and synthetic API traffic generation to validate platform stability.
Implement observability and telemetry for real-time API traffic analytics and proactive issue resolution .
5. DevOps, Automation & CI/CD
Implement GitOps-based CI/CD pipelines for infrastructure-as-code deployments using Terraform, Helm, and ArgoCD .
Automate GKE cluster upgrades, patch management, and Apigee hybrid configurations .
Ensure zero-downtime deployments and maintain disaster recovery (DR) strategies .
6. Knowledge Transfer & Operational Readiness
Conduct knowledge transfer sessions for the SRE (Site Reliability Engineering) team on managing Apigee Hybrid on GCP.
Develop runbooks, troubleshooting guides, and operational best practices .
Set up alerts, monitoring dashboards, and proactive notifications to ensure continuous platform availability .
Required Skills & Qualifications:
10+ years of experience in cloud architecture, with 5+ years in GCP .
Strong expertise in Google Kubernetes Engine (GKE), Apigee Hybrid, Helm, and Terraform.
Experience with hybrid cloud networking (Cloud Interconnect, VPN, VPC Peering, etc.) .
Hands-on experience with Kubernetes-based API gateways, service mesh (Istio, Anthos), and containerized API management solutions .
Proficiency in CI/CD tools (Jenkins, ArgoCD, GitOps) and Infrastructure as Code (Terraform, Helm) .
Deep knowledge of API security, IAM, RBAC, OAuth, JWT, and mTLS authentication .
Experience in financial services or banking industry is a plus.
Strong analytical and problem-solving skills with performance optimization expertise .
Excellent communication and stakeholder management skills.
Preferred Certifications:
Google Professional Cloud Architect
Google Professional Cloud Security Engineer
Google Professional DevOps Engineer
Kubernetes Certified Administrator (CKA)
Benefits & Compensation:
Competitive salary with performance-based bonuses .
Opportunity to lead a high-impact, large-scale cloud transformation project .
Work with cutting-edge cloud and API management technologies .
Exposure to multi-cloud, hybrid cloud, and security best practices .

---