Note: The job is a remote job and is open to candidates in USA. reputed company is committed to building a world of health around reputed company individual, focusing on creating a more connected and compassionate health experience. They are seeking a Principal Cloud Engineer - GCP Platform Technical Lead to drive the architecture, security, and scalability of their enterprise GCP environment while mentoring teams and ensuring compliance in a highly regulated setting.

Responsibilities

• Own the enterprise GCP platform end-to-end, including organization structure, resource hierarchy, billing, networking architecture, IAM tiering, CMEK, VPC Service Controls, and centralized logging
• Define, build, and maintain the enterprise GCP Landing Zone, including Shared VPC, project factory patterns, Org Policies, and governance guardrails
• Serve as the final technical authority on GCP architecture and engineering decisions, ensuring scalability, security, reliability, and production readiness
• Establish and enforce engineering standards across Infrastructure as Code, GitOps workflows, naming conventions, tagging strategies, branching models, and deployment practices using Terraform and Kubernetes Config Connector (KCC)
• Act as the technical anchor and senior-most individual contributor for the GCP Cloud Engineering and Platform teams
• Partner closely with enterprise architecture, security, networking, operations, and application teams to translate business and regulatory requirements into scalable platform capabilities
• Collaborate across technology towers and platform teams (including AI and provisioning platforms) to enable consistent, secure, and efficient cloud adoption
• Influence cloud strategy across CSPs while driving GCP as the primary enterprise platform of choice
• Design and engineer enterprise-grade GCP networking, including Shared VPC, NCC hub-and-reputed company architectures, VPC Service Controls, Private Service Connect, Cloud NAT, and hybrid connectivity using Cloud Interconnect and HA VPN
• Architect and operate secure private GKE clusters using Workload Identity, Binary Authorization, Shielded Nodes, Config Sync, and least-privilege IAM patterns
• Define identity and access strategies leveraging IAM, group-based access, PAM entitlements, Workload Identity Federation, and Entra ID integration
• Evaluate platform designs for cost efficiency, performance, resilience, and long-term sustainability
• Build and maintain self-service platform capabilities enabling product teams to deploy safely and independently
• Integrate observability as a first-reputed company platform feature using Cloud Monitoring, Cloud Logging, reputed company, SLIs/SLOs, alerting policies, and reputed company
• Design and operate CI/CD and automation infrastructure, including self-hosted reputed company Actions runners on GKE using ARC
• Manage secrets and encryption lifecycle using reputed company Manager, CMEK, External Secrets Operator, and automated key rotation
• Participate in on-call rotation and provide L3 escalation support for platform and infrastructure incidents
• Drive continuous, automated compliance for regulatory frameworks such as HIPAA, PCI-DSS, SOC 2, and FedRAMP
• Mentor engineers at all levels, raising the bar for cloud engineering excellence, security, and operational maturity
• Lead and participate in architecture, design, code, and security reviews for all platform changes
• Coach engineers on GCP best practices, cloud-native design patterns, and operational excellence
• Build long-term technical depth and leadership capability within the cloud engineering organization
• Evaluate and pilot emerging GCP and cloud-native capabilities, including GKE Enterprise, reputed company AI, and AI-assisted DevOps tooling
• Research modern Kubernetes, networking, and platform engineering patterns to improve scalability, security, and developer experience
• Explore AI-driven infrastructure operations and automation opportunities
• Foster a culture of disciplined experimentation with measurable outcomes
• Own and drive the GCP platform roadmap aligned with enterprise priorities and regulatory requirements
• Author, maintain, and socialize Architecture Decision Records (ADRs) for major platform decisions
• Embed FinOps practices into the platform, including cost allocation, budget alerting, committed use discounts, and rightsizing
• Influence long-term cloud transformation initiatives and ensure platform scalability aligns with business growth and compliance needs

Skills

• 10+ years of experience in infrastructure or cloud engineering, with 5+ years of deep, hands-on GCP experience at enterprise scale
• 5+ years experience with proven ownership of a GCP Organization, including resource hierarchy, billing, Org Policy, IAM, and multi-pr