GCP Admin -Lead or Architect Level

Experience : 8 to 14 Years

Location : Anywhere

Notice : Immediately

Healthcare Domain

- Solid experience in Google Cloud Platform (GCP) administration
- Hands-on expertise in:
- Compute Engine
- Cloud Storage
- VPC & networking
- IAM & security
- Experience with Terraform / Infrastructure as Code (IaC)
- Knowledge of Linux/Unix systems administration
- Understanding of cloud security and compliance
- Experience with monitoring & logging tools
- Basic knowledge of containers (Docker, Kubernetes / GKE)
- Familiarity with CI/CD pipelines

- Organization & Resource Hierarchy

Org setup, folders, projects, resource hierarchy design

Inheritance of policies across hierarchy

- Identity & Access Management (IAM)

Custom roles, predefined roles, IAM conditions

Service accounts — creation, binding, impersonation, key management

Workload Identity Federation

IAM audit and least privilege enforcement

- Networking

VPC design — subnets, regions, CIDR planning

Shared VPC — host and service project setup

VPC peering, Private Service Connect, Cloud NAT

Firewall rules — hierarchical vs VPC-level, tagging strategy

Cloud DNS — private zones, forwarding, peering

Cloud VPN, Cloud Interconnect, Network Connectivity Center

Load balancing — internal vs external, global vs regional

- Security & Compliance

Organization policies — constraints, enforcement

VPC Service Controls — perimeters, access levels

Cloud Armor — WAF rules, DDoS protection

Secret Manager, KMS — key rotation, CMEK

Security Command Center

Audit logging — data access logs, admin activity logs

- Compute Administration

Compute Engine — instance templates, MIGs, OS patch management

GKE — cluster setup, node pools, upgrades, private clusters

Cloud Run,



Cloud Functions — governance and limits

- Storage & Data Administration

GCS — bucket policies, lifecycle rules, retention, CMEK

BigQuery — dataset IAM, column-level security, VPC-SC integration

Persistent Disks, Filestore

- Cost Management & Governance

Budgets and alerts

Quotas and limits management

Committed use discounts, resource rightsizing

Billing account structure, billing export to BigQuery

- Monitoring & Observability

Cloud Monitoring — custom dashboards, uptime checks, alerting policies

Cloud Logging — log sinks, log-based metrics, retention policies

Error Reporting, Cloud Trace

Ops Agent deployment on VMs

- Infrastructure as Code & Automation

Terraform at scale — modules, remote state, workspaces

Config Controller / Terraform on GCP landing zones

Cloud Build, deployment pipelines for infra

- Backup, DR & Resilience

Snapshot schedules, cross-region replication

Multi-region vs regional architecture trade-offs1. Organization & Resource Hierarchy

Org setup, folders, projects, resource hierarchy design

Inheritance of policies across hierarchy

- Identity & Access Management (IAM)

Custom roles, predefined roles, IAM conditions

Service accounts — creation, binding, impersonation, key management

Workload Identity Federation

IAM audit and least privilege enforcement

- Networking

VPC design — subnets, regions, CIDR planning

Shared VPC — host and service project setup





VPC peering, Private Service Connect, Cloud NAT

Firewall rules — hierarchical vs VPC-level, tagging strategy

Cloud DNS — private zones, forwarding, peering

Cloud VPN, Cloud Interconnect, Network Connectivity Center

Load balancing — internal vs external, global vs regional

- Security & Compliance

Organization policies — constraints, enforcement

VPC Service Controls — perimeters, access levels

Cloud Armor — WAF rules, DDoS protection

Secret Manager, KMS — key rotation, CMEK

Security Command Center

Audit logging — data access logs, admin activity logs

- Compute Administration

Compute Engine — instance templates, MIGs, OS patch management

GKE — cluster setup, node pools, upgrades, private clusters

Cloud Run, Cloud Functions — governance and limits

- Storage & Data Administration

GCS — bucket policies, lifecycle rules, retention, CMEK

BigQuery — dataset IAM, column-level security, VPC-SC integration

Persistent Disks, Filestore

- Cost Management & Governance

Budgets and alerts

Quotas and limits management

Committed use discounts, resource rightsizing

Billing account structure, billing export to BigQuery

- Monitoring & Observability

Cloud Monitoring — custom dashboards, uptime checks, alerting policies

Cloud Logging — log sinks, log-based metrics, retention policies

Error Reporting, Cloud Trace

Ops Agent deployment on VMs

- Infrastructure as Code & Automation

Terraform at scale — modules, remote state, workspaces

Config Controller / Terraform on GCP landing zones

Cloud Build, deployment pipelines for infra

- Backup, DR & Resilience

Snapshot schedules, cross-region replication

Multi-region vs regional architecture trade-offs

📌 GCP Admin - 8+ Years- Immediate Joiners only (India)
🏢 SynapseWorks AI
📍 India