1xGCP Architect / 1xGCP IAM/PAM Architect

1x GCP Architect (Tier1) 1x GCP IAM/PAM Architect

Certifications

  • Google Cloud Architect Certification (Professional Cloud Architect) -in date mandatory

Role OverviewOur key client is seeking a Tier 1 Google Cloud Architect to support a large-scale Google Cloud migration programme. The successful candidate will play a key role in designing and delivering end-to-end Google Cloud solutions, covering infrastructure, platforms, and networking.This is a hands-on architecture role requiring strong experience across GCP build, migration, and automation, with a focus on delivering scalable, secure cloud environments aligned with enterprise standards.Programme Overview

  • Enterprise Google Cloud migration programme
  • Scope includes:
  • Landing Zone design & implementation
  • Google Compute Engine (GCE)
  • Google Cloud VMware Engine (GCVE)
  • Google Kubernetes Engine (GKE)
  • Focus on modernisation, automation, and cloud-native adoption

Key Skills & ExperienceEssential

  • Minimum 5+ years of Google Cloud experience
  • Proven experience as a Cloud Architect on large-scale migration programmes
  • Hands-on experience across:
  • GCP Landing Zones
  • GCE, GCVE, GKE
  • GCP Networking (VPCs, firewalls, connectivity)
  • Strong experience with:
  • Terraform & Terragrunt
  • GitHub (version control & workflows)
  • CI/CD pipeline design and implementation
  • Experience with GCP Native Monitoring & Observability

Certifications

  • Google Cloud Architect Certification (Professional Cloud Architect) - in date mandatory

Role OverviewThe GCP IAM / PAM Architect is a senior technical leadership role responsible for the design, implementation, and governance of Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions within the WPP Google Cloud environment.This role ensures that identity services are secure, scalable, and compliant, aligned with enterprise security standards and least-privilege access principles. The architect will work across multiple IAM domains and provide end-to-end ownership from strategy through to delivery oversight.The key priority for this role is expertise in ADM (Access & Directory Management).Key ResponsibilitiesArchitecture & Design

  • Design and define end-to-end IAM and PAM architectures across GCP and enterprise platforms
  • Develop secure identity frameworks aligned to zero trust and least privilege principles
  • Architect integrations between:
  • GCP IAM & GCP Identities
  • Okta (SSO / Federation)
  • Active Directory (AD / AAD where applicable)
  • BeyondTrust PAM
  • Produce high- and low-level design documentation

Key Skills & ExperienceEssential

  • Strong experience as an IAM / PAM Architect in enterprise environments
  • Deep expertise in:
  • Google Cloud Platform (GCP) IAM & GCP Identity
  • Privileged Access Management (PAM) solutions (ideally BeyondTrust)
  • Access & Directory Management (ADM) frameworks
  • Proven experience integrating:
  • Okta (SSO, MFA, federation)
  • Active Directory (AD / Hybrid identity)
  • Strong understanding of:
  • RBAC / ABAC models
  • Identity federation (SAML, OIDC, OAuth)
  • Experience with large-scale cloud transformation programmes

Please note that GCP, Beyond Trust, and Terraform and Okta are key technical requirements for both roles. Please get in touch as these will go quickly!

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Job Details

Company
Hays Specialist Recruitment Limited
Location
London, South East, England, United Kingdom
Employment Type
Contractor
Salary
Salary negotiable
Posted