Principal Cloud AI Platform Architect
GXO Logistics1 month ago
Remote, United StatesStaff+
Responsibilities
- Provide principal-level architecture leadership for GXO’s Google Cloud environment, including landing zones, organization policies, networking, identity, security, and platform design.
- Design and evolve Google Cloud foundations using folder and project hierarchies, Shared VPC, Private Service Connect, Identity-Aware Proxy, Workload Identity Federation, Secret Manager, Cloud KMS/CMEK, and Cloud Logging and Monitoring.
- Lead Google Kubernetes Engine architecture covering networking, ingress and egress, autoscaling, security, observability, production operations, and deployment standards.
- Establish platform engineering standards through Terraform modules, GitOps, CI/CD pipelines, DevSecOps controls, policy-as-code, and paved-road developer experiences.
- Develop enterprise reference architectures, architectural decision records, technical standards, and cloud design patterns.
- Implement zero-trust architecture, identity federation, least-privilege access, encryption, secrets management, audit logging, and secure-by-default cloud operations.
- Define enterprise observability and FinOps standards for cost attribution, budgeting, service level objectives, tracing, monitoring, and operational excellence.
- Lead Google Cloud architecture for GXO’s Enterprise AI Platform, including Gemini Enterprise Agent Platform, LiteLLM, Agent Gateway, MCP, Agent Registry, ADK, and governed Snowflake integrations.
- Design secure, scalable, model-agnostic AI inference, agent runtimes, identity passthrough, tool execution, and end-to-end traceability.
- Provide architecture support for analytics, application modernization, integration, and data platforms; evaluate emerging Google Cloud and partner technologies.
- Conduct architecture reviews, design governance, technical mentorship, and executive-level technology recommendations.
- Provide hands-on technical leadership by writing Terraform, reviewing IAM policies, troubleshooting GKE networking, and partnering with engineering teams.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical field, or equivalent work experience.
- Google Cloud Professional Cloud Architect certification.
- 12–15+ years of experience in cloud architecture, enterprise architecture, distributed systems, or platform engineering.
- At least 7 years of hands-on experience designing and operating enterprise-scale Google Cloud environments.
- Deep expertise in Google Cloud architecture, including landing zones, organization policies, IAM, Workload Identity Federation, networking, Shared VPC, Private Service Connect, VPC Service Controls, Cloud KMS/CMEK, IAP, logging, monitoring, and secure cloud operations.
- Extensive experience designing and operating production Google Kubernetes Engine platforms.
- Strong experience with Terraform, GitOps, CI/CD pipelines, and policy-as-code frameworks.
- Demonstrated expertise in zero-trust cloud security, identity federation, least-privilege access, encryption, secrets management, audit logging, and governance.
- Experience designing enterprise observability and FinOps capabilities, including monitoring, tracing, cost management, budgeting, and operational maturity.
- Experience designing enterprise AI or LLM platforms using Vertex AI, Gemini Enterprise Agent Platform, LiteLLM, MCP, AI gateways, agent runtimes, or comparable technologies.
- Strong analytical, written communication, collaboration, architecture documentation, design review, and executive communication skills.
- Ability to balance architecture strategy, hands-on engineering, stakeholder engagement, competing initiatives, and minimal-supervision work in a global enterprise.
- Preferred: Google Cloud Professional Security Engineer, Google Cloud Professional DevOps Engineer, Google Cloud Professional Machine Learning Engineer, CKA, CKAD, or HashiCorp Terraform Associate certification.
- Preferred: experience integrating Google Cloud with Snowflake using OAuth, RBAC, masking policies, row-level security, and governed data access.
- Preferred: experience with secure multi-tenant enterprise platforms, emerging AI and cloud technologies, enterprise architecture governance, and mentoring architects and engineers.
Benefits
- Full health insurance including medical, dental, and vision coverage.
- 401(k), life insurance, disability insurance, and additional benefits.
- Equal Opportunity employment environment including Disabled/Veterans.
- A pre-employment drug test may be required after a conditional offer.
Tech Stack
Categories
About GXO Logistics
GXO Logistics provides contract logistics services, designing and operating warehouses and fulfillment centers with advanced automation, robotics, and data-driven processes for retailers, e-commerce platforms, consumer goods companies, and manufacturers. Its offerings include e-commerce fulfillment, reverse logistics, and supply chain management. The company was formed in 2021 as a spin-off from XPO Logistics, is headquartered in Greenwich, Connecticut, and is publicly traded on the NYSE.