• Build scalable cloud-native solutions. • Develop automation frameworks. • Integrate infrastructure platforms. • Create engineering tools and dashboards that improve operational efficiency.

Role Description Are you ready to take your career to the next level with a rapidly growing global company? As the Principal Cloud AI Platform Architect, Google Cloud, you will serve as GXO's principal authority for Google Cloud architecture, platform engineering, and enterprise cloud design. This role provides hands-on technical leadership across Google Cloud Platform (GCP), establishing architectural standards, engineering best practices, and secure-by-default cloud foundations that enable enterprise-scale innovation. If you're looking for an opportunity to shape the future of cloud architecture and enterprise AI at a global scale, join us at GXO. What you'll do on a typical day - Provide principal-level architecture leadership for GXO's Google Cloud environment, including landing zones, organization policies, networking, identity, security, and platform design. - Design and evolve enterprise Google Cloud foundations including folder and project hierarchy, Shared VPC, Private Service Connect, Identity-Aware Proxy (IAP), Workload Identity Federation, Secret Manager, Cloud KMS/CMEK, and Cloud Logging and Monitoring. - Lead architecture for Google Kubernetes Engine (GKE), including networking, ingress/egress, autoscaling, security, observability, production operations, and deployment standards. - Establish enterprise platform engineering standards through Terraform modules, GitOps, CI/CD pipelines, DevSecOps controls, policy-as-code, and paved-road developer experiences. - Develop and maintain enterprise reference architectures, architectural decision records (ADRs), technical standards, and cloud design patterns. - Partner with Information Security to implement zero-trust architecture, identity federation, least privilege access, encryption, secrets management, audit logging, and secure-by-default cloud operations. - Define enterprise observability and FinOps standards including cost attribution, budgeting, service level objectives (SLOs), tracing, monitoring, and operational excellence. - Lead the Google Cloud architecture for GXO's Enterprise AI Platform, including Gemini Enterprise Agent Platform, LiteLLM, Agent Gateway, MCP, Agent Registry, ADK, and governed Snowflake integrations. - Partner with Data Engineering, Security, and Product Architecture to design secure, scalable, model-agnostic AI inference, agent runtimes, identity passthrough, tool execution, and end-to-end traceability. - Contribute to future AI platform capabilities including model tiering, open-source model serving on GKE, and evolving enterprise AI architecture. - Serve as the principal Google Cloud architect supporting additional enterprise workloads including analytics, application modernization, integration, and data platforms. - Evaluate emerging Google Cloud technologies and strategic partner offerings for enterprise adoption. - Conduct architecture reviews, design governance, technical mentorship, and executive-level technology recommendations. - Collaborate with enterprise, infrastructure, security, and data architects to establish consistent cloud architecture standards across GXO. - Provide hands-on technical leadership by writing Terraform, reviewing IAM policies, troubleshooting GKE networking, and partnering directly with engineering teams. Qualifications - Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, or equivalent work experience. - Google Cloud Professional Cloud Architect certification. - 12–15+ years of experience in cloud architecture, enterprise architecture, distributed systems, or platform engineering. - 7+ years of hands-on experience designing and operating enterprise-scale Google Cloud environments. - Deep expertise in Google Cloud architecture including landing zones, organization policies, IAM, Workload Identity Federation, networking, Shared VPC, Private Service Connect, VPC Service Controls, Cloud KMS/CMEK, IAP, logging, monitoring, and secure cloud operations. - Extensive experience designing and operating production Google Kubernetes Engine (GKE) platforms. - Strong experience implementing Infrastructure as Code using Terraform, GitOps, CI/CD pipelines, and policy-as-code frameworks. - Demonstrated expertise implementing zero-trust cloud security, identity federation, least privilege access, encryption, secrets management, audit logging, and governance. - Experience designing enterprise observability and FinOps capabilities including monitoring, tracing, cost management, budgeting, and operational maturity. - Experience designing enterprise AI or LLM platforms utilizing Vertex AI, Gemini Enterprise Agent Platform, LiteLLM, MCP, AI gateways, agent runtimes, or comparable technologies. - Excellent analytical skills with the ability to translate complex business requirements into scalable enterprise architectures. - Strong written communication skills with experience producing executive-ready architecture documentation, standards, design reviews, and technical recommendations. - Exceptional communication and collaboration skills with the ability to engage engineering teams, executive leadership, technology partners, and security organizations. - Proven ability to prioritize competing initiatives while balancing architecture strategy, hands-on engineering, and stakeholder engagement. - Ability to operate effectively with minimal supervision in a fast-paced, global enterprise environment. Requirements - It'd be great if you also have: - Google Cloud Professional Security Engineer certification. - Google Cloud Professional DevOps Engineer certification. - Google Cloud Professional Machine Learning Engineer certification. - Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD). - HashiCorp Terraform Associate certification. - Experience integrating Google Cloud workloads with Snowflake using OAuth, RBAC, masking policies, row-level security, and governed data access. - Experience designing secure multi-tenant enterprise platforms on Google Cloud. - Experience evaluating emerging AI, cloud, and platform technologies for enterprise adoption. - Demonstrated success collaborating within enterprise architecture organizations while contributing to shared standards and technical governance. - Experience mentoring architects and engineers while elevating enterprise architecture practices across large organizations. Benefits - We are eager to attract the best, so we offer competitive compensation and a generous benefits package, including: - Full health insurance (medical, dental and vision) - 401(k) - Life insurance - Disability - And more. Company Description GXO is a leading provider of cutting-edge supply chain solutions to the most successful companies in the world. We help our customers manage their goods most efficiently using our technology and services. Our greatest strength is our global team – energetic, innovative people of all experience levels and talents who make GXO a great place to work. We are proud to be an Equal Opportunity employer including Disabled/Veterans. GXO adheres to CDC, OSHA and state and local requirements regarding COVID safety. All employees and visitors are expected to comply with GXO policies which are in place to safeguard our employees and customers. All applicants who receive a conditional offer of employment may be required to take and pass a pre-employment drug test. The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified. All employees may be required to perform duties outside of their normal responsibilities from time to time, as needed.

• Provide advanced technical expertise in securing AWS cloud environments through continuous vulnerability management, Cloud-Native Application Protection Platform (CNAPP) operations, threat detection, compliance monitoring, and cloud security engineering • Implement, configure, and manage CNAPP capabilities across AWS cloud environments supporting FedRAMP High compliance requirements • Configure and maintain AWS-native security services • Implement and monitor Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), workload protection, runtime security, vulnerability management, attack-path analysis, encryption controls, network segmentation, backup/recovery protections, and continuous compliance monitoring capabilities • Monitor and analyze Wiz vulnerabilities, Splunk alerts, AWS security findings, SIEM events, runtime alerts, and New Relic dashboards to identify threats, validate remediation efforts, and support continuous cloud security operations and incident response activities • Implement and validate security baselines, policy enforcement mechanisms, encryption standards, workload isolation controls, secrets protection, secure storage configurations, and least-privilege access controls aligned with Zero Trust principles • Integrate CNAPP tooling with SIEM, logging, monitoring, alerting, automated remediation, and incident response platforms to support centralized cloud security operations • Support continuous ATO activities by developing and maintaining SSPs, security implementation procedures, SOPs, mitigation plans, technical runbooks, automated remediation playbooks, audit evidence, POA&M documentation, and operational security documentation supporting FedRAMP, NIST 800-53, FISMA, and Judiciary security requirements

• Support the design, deployment, and maintenance of hybrid cloud infrastructures across on-premises and commercial/government cloud platforms (AWS, Azure, GCP, OCI) utilizing IaaS and PaaS solutions • Administer and optimize virtualization platforms such as VMware ESXi, Hyper-V, and cloud-native virtualization technologies • Assist with automating deployments, configurations, and resource provisioning using Infrastructure-as-Code (IaC) tools including Terraform, Ansible, and CloudFormation • Collaborate with cloud and infrastructure teams to support integration efforts and ensure consistent enterprise solutions • Implement and support containerization and orchestration technologies such as Docker and Kubernetes within cloud and hybrid environments • Monitor cloud and virtualization environments to maintain system availability, performance, scalability, and operational efficiency • Troubleshoot infrastructure, application, and system issues, performing root cause analysis and implementing corrective actions as needed • Apply security best practices including IAM, encryption, and network segmentation while supporting compliance with frameworks such as RMF, NIST, and ISO 27001 • Support and maintain CI/CD pipelines and assist with automation efforts across the software development lifecycle • Configure and maintain monitoring and logging tools (Prometheus, Grafana, etc.) to support operational monitoring and incident response activities • Maintain technical documentation including system configurations, operational procedures, and troubleshooting guides • Provide guidance and knowledge sharing to junior team members and collaborate effectively within cross-functional teams • Work closely with engineering, operations, and program stakeholders to support infrastructure solutions aligned with mission and business requirements