Network Admin - Onsite at Englewood, CO

Role GCP Enterprise Architect (Platform Automation Architect, GCP) Practice Trace3 — Cloud Solutions Group, Digital · Google Cloud Practice Workstream Product Teams Support Location Remote (U.S.) Reports To Trace3 Google Cloud Practice / Engagement leadership 43647 Role Overview Serves as the dedicated enterprise architect for Gap's Google Cloud program, evaluating incoming use cases holistically and defining the most appropriate end-to-end solution design across security, networking, and infrastructure automation. This Trace3-led role translates business and technical requirements into scalable, secure, and supportable cloud automation patterns; produces documented, repeatable architecture artifacts; and coordinates required changes across dependent teams to completion. The architect strengthens the overall solution-design process, improves cross-functional alignment, and accelerates delivery of Gap's cloud initiatives. Key Responsibilities • Evaluate incoming use cases holistically and define end-to-end solution designs spanning security, networking, and infrastructure automation. • Translate business and technical requirements into scalable, secure, and supportable cloud automation patterns. • Produce documented, repeatable architecture artifacts and reference designs that delivery teams can operationalize. • Partner across Gap's InfoSec, Network, and Infrastructure Automation teams to ensure designs align across all foundational pillars and can be operationalized effectively. • Coordinate required changes across dependent teams and drive them to completion. • Provide architectural direction across the program's technical domains — network security architecture, foundational GCP organization and IAM, cloud security posture management, Terraform/IaC structure, and the Gemini Enterprise Agent (Vertex AI) platform. • Guide persona-based least-privilege IAM design, organization policy, VPC Service Controls, Private Service Connect, and CMEK/encryption standards. • Establish Terraform architecture standards — separation of global/shared policy from perimeter-specific implementation, shared-module strategy, drift detection, and CI/CD policy-as-code gating. • Provide architectural guidance to the NCC network transition and hybrid-connectivity direction (including Cross-Cloud Interconnect to Azure) where it intersects platform automation. • Support project governance — participate in design reviews, secure architecture sign-off, and maintain alignment to timelines and scope. Primary Deliverables • Architecture designs and supporting documentation for approved use cases. • Reusable reference solution patterns spanning security, networking, and infrastructure automation. • Persona-based IAM / least-privilege role design and foundation policy recommendations. • Terraform repository and structure design guidance (global vs. shared policy separation, module strategy, drift detection, IaC security scanning). • Design artifacts for the Gemini Enterprise Agent Platform (Agent Engine, RAG Engine, Vector Search), including governance and threat-model considerations. Required Qualifications • Extensive enterprise / cloud architecture experience with deep, hands-on Google Cloud Platform expertise. • Demonstrated ability to own end-to-end solution design across security, networking, and infrastructure automation. • Expert-level Terraform / Infrastructure-as-Code design and standards. • Strong command of GCP foundations: resource hierarchy and organization policy, IAM and least-privilege design, Shared VPC, VPC Service Controls, Private Service Connect, and CMEK. • Experience embedding security and compliance into cloud designs (e.g., PII/PCI-regulated workloads) and cloud security posture management. • Proven cross-functional leadership — aligning InfoSec, Network, and Infrastructure/Platform teams and driving change to completion. • Excellent documentation, communication, and stakeholder-management skills. Preferred Qualifications • Google Cloud Professional certifications (Cloud Architect, Cloud Security Engineer, and/or Cloud Network Engineer). • Vertex AI / generative-AI platform architecture — Agent Engine, RAG Engine, Vector Search, Model Armor, and Model Garden governance. • CI/CD policy-as-code tooling (OPA/Conftest, Checkov, tfsec) and layered Terraform pipelines. • Cloud security posture management with Prisma Cloud. • Network Connectivity Center (NCC), hub-and-spoke fabric, and hybrid connectivity including Cross-Cloud Interconnect to Azure. • Experience in large, regulated, enterprise-scale (e.g., retail) environments. Core Technology Environment Google Cloud Platform; Terraform / Infrastructure-as-Code; IAM, organization policy, Shared VPC, VPC Service Controls, Private Service Connect, and CMEK; Vertex AI / Gemini (Agent Engine, RAG Engine, Vector Search, Model Armor, Model Garden); Cloud Run; Prisma Cloud (CSPM); CI/CD policy-as-code (OPA/Conftest, Checkov, tfsec); and Network Connectivity Center with Cross-Cloud Interconnect to Azure. Engagement Details & Working Arrangement • Delivery model: Dedicated Trace3 consulting resource embedded with Gap's GCP program, supporting the Product Teams Support workstream alongside the broader GCP Architecture Support and NCC Transition projects. • Location: Remote (U.S.). All work performed remotely via secure VPN/collaboration tooling. • Hours: Normal business hours (8:00 AM – 5:00 PM client local time); occasional off-hours work by mutual agreement to support change windows. • Security & compliance: Trace3-managed device, hard-drive encryption, two-factor authentication, and adherence to the client's remote-work protocols and information-security standards.