Administer the client's GCP organization and eight development and production projects across four business units, covering IAM, org policy, networking, API governance, and environment provisioning. • Provisioned four new production and Corporate business-unit projects, aligning folder, billing, and naming standards with existing environments, and built the dev-to-prod services and user-access rollout plans approved by the GCP Lead. • Onboarded Palo Alto Cortex CSPM across the GCP organization via Terraform: reviewed the vendor IaC for least privilege, flagged org-wide setIamPolicy grants in its automation role (leading to a read-only deployment decision), and resolved Domain Restricted Sharing org-policy blockers. • Authored reusable Terraform modules for Workload Identity Federation and IAM bindings in GitLab, delivered through peer-reviewed merge requests and GitLab CI runners, with the enterprise mandatory tag schema applied as GCP labels. • Implemented Workload Identity Federation between AWS EKS and GCP, enabling keyless cross-cloud authentication for workloads. • Authored the GCP policy implementation runbook for organization-wide AppID tagging enforcement across all eight projects, in partnership with FinOps and Google's Solutions Consultant. • Integrated GCP billing with Cloudability and BigQuery billing export for FinOps cost visibility and business-unit attribution. • Resolved complex Cloud Storage access failures affecting Vertex AI image/video generation tools by working with Google Cloud Support, then implemented conditional IAM bindings scoped to AI staging buckets. • Standardized API key naming, tagging, and governance; managed Gemini Enterprise licensing and access provisioning for AI platform users
Linked-in
Google