Job Description
1x GCP Architect (Tier1) 1x GCP IAM/PAM Architect
Certifications
* Google Cloud Architect Certification (Professional Cloud Architect) -in date mandatory
Role OverviewOur key client is seeking a Tier 1 Google Cloud Architect to support a large-scale Google Cloud migration programme. The successful candidate will play a key role in designing and delivering end-to-end Google Cloud solutions, covering infrastructure, platforms, and networking.This is a hands-on architecture role requiring strong experience across GCP build, migration, and automation, with a focus on delivering scalable, secure cloud environments aligned with enterprise standards.Programme Overview
* Enterprise Google Cloud migration programme
* Scope includes:
* Landing Zone design & implementation
* Google Compute Engine (GCE)
* Google Cloud VMware Engine (GCVE)
* Google Kubernetes Engine (GKE)
* Focus on modernisation, automation, and cloud-native adoption
Key Skills & ExperienceEssential
* Minimum 5+ years of Google Cloud experience
* Proven experience as a Cloud Architect on large-scale migration programmes
* Hands-on experience across:
* GCP Landing Zones
* GCE, GCVE, GKE
* GCP Networking (VPCs, firewalls, connectivity)
* Strong experience with:
* Terraform & Terragrunt
* GitHub (version control & workflows)
* CI/CD pipeline design and implementation
* Experience with GCP Native Monitoring & Observability
Certifications
* Google Cloud Architect Certification (Professional Cloud Architect) - in date mandatory
Role OverviewThe GCP IAM / PAM Architect is a senior technical leadership role responsible for the design, implementation, and governance of Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions within the WPP Google Cloud environment.This role ensures that identity services are secure, scalable, and compliant, aligned with enterprise security standards and least-privilege access principles. The architect will work across multiple IAM domains and provide end-to-end ownership from strategy through to delivery oversight.The key priority for this role is expertise in ADM (Access & Directory Management).Key ResponsibilitiesArchitecture & Design
* Design and define end-to-end IAM and PAM architectures across GCP and enterprise platforms
* Develop secure identity frameworks aligned to zero trust and least privilege principles
* Architect integrations between:
* GCP IAM & GCP Identities
* Okta (SSO / Federation)
* Active Directory (AD / AAD where applicable)
* BeyondTrust PAM
* Produce high- and low-level design documentation
Key Skills & ExperienceEssential
* Strong experience as an IAM / PAM Architect in enterprise environments
* Deep expertise in:
* Google Cloud Platform (GCP) IAM & GCP Identity
* Privileged Access Management (PAM) solutions (ideally BeyondTrust)
* Access & Directory Management (ADM) frameworks
* Proven experience integrating:
* Okta (SSO, MFA, federation)
* Active Directory (AD / Hybrid identity)
* Strong understanding of:
* RBAC / ABAC models
* Identity federation (SAML, OIDC, OAuth)
* Experience with large-scale cloud transformation programmes
Please note that GCP, Beyond Trust, and Terraform and Okta are key technical requirements for both roles. Please get in touch as these will go quickly!
Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk