GCP Cloud Architect

Role: GCP Cloud Architect

Experience: 8+ years

Remote

US Shift (6 PM - 2 AM)

Company URL: https://crossasyst.com

Company Description: CrossAsyst redefines the way companies experience and benefit from technology. Our delivery model is infused with a distinct culture of high customer satisfaction. We deliver trusted partnership, cost reductions and business results by driving technology innovation for better and faster outcomes.

Role Summary:

As a Cloud Network and Security Engineer (GCP) you will be responsible for analyzing and delivering technical solutions and services to our clients. You will work closely with clients, technical leadership, internal and customer stakeholders to understand the requirements, support design discussions and recommend curated solutions. Your expertise in the Network and Security domain with an emphasis on understanding on-prem routing, BGP, OSPF, on-prem to GCP connectivity solutions, GCP Cloud Interconnect, GCP Load balancers, GCP HA VPN, Cloud routers, Private Service Connect, third party firewall setup and maintenance, GCP Service Control Perimeter, Org policies, Firewall rules and other GCP Security Services is important to provide optimal design and to ensuring client satisfaction and successful project outcomes.

Project Responsibilities:

• Evaluate customer existing architecture and requirement to transform in an optimal best-case solution
• Work with project team to establish quality standards and methods that ensure on-time and in-scope delivery
• Assist and work with internal technical teams during end-to-end delivery of project including solution, design, implementation and troubleshooting in network and security domain
• Should be good team-player to collaborate with counterparts and other domain experts to deliver optimal solution
• Should have good communication skill to front-end customer and leadership discussion
• Should have good documentation skills to cover the solution and designs in presentable format that meets industry standards

Technical expertise:

• Good understanding and hands-on experience on GCP services like Cloud Interconnect, Virtual Private Cloud (VPC) networks, subnets, Cloud router, VPC peering, Cloud HA VPN, firewalls and the interconnection among networks, Cloud load balancing; Cloud DNS, Cloud CDN, Cloud NAT, Cloud Armor, Cloud Shell, Cloud console, Network Connectivity Center, Cloud IDS Private Google Access and Private Service Connect/Endpoints.
• Good understanding and hands-on experience on GCP Security components/services like Cloud Armor, Firewall rules, Service Control perimeter, flow logs, Cloud Security Command Center, IAM, KMS, GKE Security.
• Good understanding of overall GCP cloud infrastructure, network and secuirty architecture.
• Good understanding and experience managing hybrid connectivity environments between multiple Data Centers and Cloud environments.
• Ability to navigate through new network and security environments, understand existing connectivity standards and recommend optimal designs/solutions per project requirements.
• Good understanding of how to securely interconnect multiple cloud accounts, on-prem servers and provide industry standard recommendations to clients.
• Interest to learn automation tools such as Terraform/ Jenkins/ CloudFormation/ Ansible/ Python/ G.
• Good understanding of data center network and security architecture with products like Cisco switches/routers, Arista/Juniper switches/routers, Palo Alto/Cisco/Fortinet firewalls, web-proxy, DNS, Perimeter Security, WAF etc..
• Good understanding of How to protect GCP Cloud-based infrastructure, including distributed denial-of-service (DDoS) attacks, phishing attacks, and dynamic threats involving WAF, content classification.
• Good design & documentation skills in network design like technical presentation, High-level designs, Low-level designs.
• Candidate must be presentable to client with excellent communication skills and must have good documentation skills
• Excellent customer relations and inter-personal skills, ability to navigate complex organizations and get the job done by working with others
• Candidate must be flexible with work schedule

Good to have:

• Good understanding on AWS and Azure cloud network and security architecture
• Good understanding of F5 load balancers/LTM/GTM, AFM, ASM, APM etc
• Good understanding of DNS infrastructure and domain management (private and public)