·        Govern an enterprise GCP organisation spanning 8 development and production projects across 4 business units; standardise IAM, organisation policy, APIs, networking, billing and provisioning to support secure AI platform delivery.

·        Provisioned 4 new production and corporate projects, aligning folder, billing and naming standards and producing dev-to-prod service and access rollout plans approved by the GCP Lead.

·        Strengthened CSPM onboarding by reviewing vendor Terraform for least privilege, identifying organisation-wide setIamPolicy risk and steering a read-only deployment; also resolved Domain Restricted Sharing policy blockers.

·        Built reusable Terraform modules for Workload Identity Federation and IAM bindings through peer-reviewed GitLab merge requests and CI runners; implemented keyless authentication between AWS EKS and GCP workloads.

·        Improved FinOps visibility by integrating GCP billing with Cloudability and BigQuery and authoring the organisation-wide AppID tagging runbook across all 8 projects for business-unit cost attribution.

      Resolved Cloud Storage access failures affecting Vertex AI image/video tooling with Google Cloud Support, then implemented conditional IAM bindings scoped to AI staging buckets.