GCP Cloud Architect at SR2 - Socially Responsible Recruitment, City of London, 6 Months, £500-£550 per day

£500 - £550 per day

Contract Description

Lead Cloud Architect - SC Cleared/Clearable

Outside IR35: £550 per day
Hybrid - 2-4 days per month in London
ASAP - 6 months initial

We are recruiting a Lead Cloud Architect to support a major cloud-transformation programme within central government. The role will lead the assessment of an existing Google Cloud Platform estate and define its future-state architecture, governance framework and target operating model.

This is a strategic architecture role focused on establishing an enterprise-scale GCP environment and transitioning its ownership between government organisations. The emphasis is on architecture, governance and operating-model design rather than hands-on engineering delivery.

Role responsibilities

  • Lead the current-state assessment of the existing GCP estate, governance and operating arrangements.
  • Define the target landing-zone architecture, GCP organisation hierarchy and folder structure.
  • Design organisation policies, governance controls and role-based access models.
  • Develop a cloud operating model covering ownership, administration, assurance and service management.
  • Define the identity strategy across Cloud Identity, Workforce Identity Federation and Entra ID.
  • Design security architecture aligned with Secure by Design, NCSC guidance and the Cyber Assessment Framework.
  • Establish the FinOps approach, including billing hierarchies, cost controls and chargeback mechanisms.
  • Define the operational transition model for transferring platform ownership and administration.

Key experience and requirements

  • Extensive enterprise or lead architecture experience across large-scale GCP environments.
  • Strong experience managing GCP Organisations, folder hierarchies, organisation policies and landing zones.
  • Experience designing enterprise cloud-governance frameworks and target operating models.
  • Strong knowledge of identity and access management, including Cloud Identity, Workforce Identity Federation and Entra ID integration.
  • Experience applying Secure by Design principles, NCSC guidance and CAF requirements.
  • Experience designing FinOps operating models, billing structures and chargeback approaches.
  • Strong stakeholder-management skills across architecture, cyber security, operations and senior leadership.
  • Active SC clearance or eligibility to obtain it; Google Professional Cloud Architect, TOGAF, CISSP or CCSP certification would be advantageous.