Architect / Principal Engineer- GCP

About The Ksquare Group
The Ksquare Group is a global technology consulting company headquartered in Dallas, Texas, with over 14 years of experience delivering technology solutions across Salesforce, cloud, data, AI, and network engineering for clients in Banking & Financial Services, Public Sector, Telecommunications, Manufacturing, Logistics, Healthcare, and Enterprise Services. With a team of 350+ professionals across the US, Mexico, the Dominican Republic and India, we help organizations solve complex business challenges and achieve measurable outcomes through our collaborative POD-based delivery model. At The Ksquare Group, we foster a culture of integrity, collaboration, continuous learning, and professional growth, empowering our teams to make a meaningful impact for clients worldwide.
About the Role
We are looking for a hands-on Cloud Architect to lead the design, build-out, and automation of secure, scalable Google Cloud Platform (GCP) environments. You will own the cloud foundation end to end — from assessment and landing-zone design through Infrastructure-as-Code automation, DevSecOps, Kubernetes/GKE, observability, and internal developer platforms. This is a senior, delivery-focused role for someone who combines deep GCP engineering expertise with a platform-engineering mindset and a passion for automation and enablement.
Key Responsibilities
Cloud Assessment & Architecture: Assess existing landscapes, define target-state GCP architectures, and design secure, well-governed landing zones and multi-tenant cloud environments.
Infrastructure as Code: Design and build modular, reusable Terraform to provision and manage all GCP infrastructure, ensuring consistency, repeatability, and drift control across environments.
DevSecOps & CI/CD: Design and implement CI/CD pipelines using GitHub Actions, embedding security throughout the lifecycle — secrets scanning, SAST/DAST, image scanning, and policy-as-code guardrails.
GCP Services Configuration: Architect and configure core GCP services — networking (VPC, subnets, peering, hybrid connectivity), databases, compute, API gateway, and Pub/Sub messaging.
Identity, IAM & Policy: Configure Cloud Identity and IAM, organization and security policies, and least-privilege access models and guardrails across the organization hierarchy.
DNS & CDN: Design and configure Cloud DNS, Cloud CDN, and load balancing for performant, resilient, and globally available services.
GKE & Kubernetes: Automate GKE cluster provisioning and lifecycle management, and lead the migration of workloads to GKE with autoscaling, networking, and Workload Identity.
Observability & Monitoring: Define the observability strategy and configure monitoring, logging, tracing, alerting, and SLO/SLI dashboards using Cloud Operations, Prometheus, and Grafana.
Platform Engineering: Build internal developer platforms and self-service capabilities using tools such as Spotify Backstage — creating golden paths, service templates, and reusable modules that accelerate delivery teams.
Leadership & Enablement: Provide technical leadership and mentoring, author architecture and standards documentation, and partner closely with client and delivery stakeholders.
Required Skills & Qualifications
Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
10+ years in IT with 5+ years architecting and delivering solutions on Google Cloud Platform (strong multi-cloud experience with a GCP focus also considered).
Deep, hands-on expertise with Terraform for Infrastructure as Code, including reusable module design.
Strong DevSecOps and CI/CD experience with GitHub Actions and shift-left security practices.
Production experience operating Kubernetes/GKE at scale, including cluster automation and workload migrations.
Expertise across GCP networking, compute, managed databases, API gateway, Pub/Sub, Cloud Identity, and IAM.
Solid grounding in cloud networking — DNS, CDN, and load balancing.
Experience designing observability with Cloud Operations suite, Prometheus, and Grafana.
Platform-engineering / internal-developer-platform experience (Spotify Backstage or similar).
Proficiency in at least one scripting/automation language (Python, Go, or Bash).
Preferred (Nice to Have)
Google Professional Cloud Architect and/or Professional Cloud DevOps Engineer certification.
Experience with multi-tenant SaaS platforms and security/compliance frameworks (ISO 27001, SOC 2).
Familiarity with service mesh (Istio/Anthos Service Mesh) and GitOps (Argo CD / Flux).
Exposure to FinOps practices and cloud cost optimization.
What You'll Bring
Excellent communication and stakeholder-management skills, a bias for automation and documentation, strong problem-solving instincts, and the ability to lead and mentor engineers in a fast-paced, client-facing environment.

Work arrangement
No