Key Responsibilities :

- Drive end-to-end GCP target infrastructure design for multi-cloud migrations - hybrid networking, IAM, storage, and security perimeters.

- Own GCP security architecture (GKE, IAM, VPC Service Controls, Security Command Center) and lead hands-on vulnerability remediation.

- Set enterprise blueprints and governance using TOGAF principles; chair ADR boards and run DAR trade-off evaluations vs. AWS/Azure.

- Map legacy AWS/Azure architectures and re-platform them onto scalable, fault-tolerant GCP topologies.

- Architect ultra-low-latency, high-concurrency transactional platforms with sub-second, edge-to-cloud performance.

- Design zero-downtime cutovers - shadow traffic, dual-write sync, automated rollback - and touchless GitOps deployments (ADO + ArgoCD).

- Architect resilient microservices/microfrontends with sidecar patterns (Istio) and BFF-driven Web (React.js) and Mobile (Kotlin) platforms.

- Lead Kafka/Redis/Valkey streaming & caching architecture and full-stack data observability via Datadog.

- Embed AI coding assistants (Cursor, Copilot) into the SDLC and present architecture decisions to C-level stakeholders.

Target Technology Stack :

- Cloud, Security & Infra: GCP (primary), AWS & Azure (sources), Security Command Center, IAM, KMS, VPC Service Controls, GKE, Istio, Terraform

- Backend & Microservices: Java/J2EE, Spring Boot, Kotlin, Python, Microservices, REST APIs, Sidecar patterns

- Web & Mobile: React.js, Microfrontends, Mobile (Native/Hybrid), BFF patterns

- Streaming & Caching: Apache Kafka, Redis, Valkey

- Databases: GCP Cloud SQL, PostgreSQL, MongoDB, Azure Cosmos DB

- DevOps & Observability: Azure DevOps, ArgoCD (GitOps), Touchless Deployments, Datadog, JProfiler

- Governance & AI: ADR Workshops, DAR Frameworks, EA Methodologies, AI Agents, Copilot/Cursor

Required Qualifications :

- 15+ years of progressive engineering leadership and enterprise architecture in complex, high-scale distributed environments.

- Deep expertise in multi-cloud migration infrastructure setup and rapid troubleshooting of IAM/network/performance issues during cutovers.

- Mastery of GCP security constructs (IAM, KMS, Cloud Armor, VPC Service Controls, Security Command Center) with hands-on remediation experience.

- Proven ability to reverse-engineer legacy AWS/Azure architectures into high-availability GCP target designs.

- Track record designing mission-critical, real-time, high-concurrency transactional or event-driven systems.

- Proven zero-downtime cutover execution - canary testing, dual-write sync, touchless deployments, automated rollback.

- Practical mastery of TOGAF / Domain-Driven Design for large-scale platform modernization (TOGAF certification a plus).

- Demonstrated microservices, microfrontend, and sidecar pattern expertise.

- Proven Web and Mobile architecture experience, including Kotlin exposure and mobile security.

- Extensive Kafka streaming and Redis/Valkey caching architecture experience.

- Hands-on data observability (data quality, schema drift, lineage) alongside APM tools like Datadog.

- Proven leadership of ADR boards and structured DAR evaluations against AWS/Azure.

- Direct GCP/multi-cloud migration leadership with zero data loss; GCP Professional Cloud Architect or Security Engineer certification highly desirable.

- Hands-on code-level credibility in Java, Spring Boot, React.js, Python, Kotlin, and polyglot databases