About the Role
We partner with global enterprises to design and build large-scale cloud platforms that power digital products used by millions of users. Our work involves complex multi-tenant architectures, federated identity systems, and high-volume AI-native use cases on GCP.
We’re looking for a Lead GCP Platform Architect - AI & Identity with deep GCP architecture expertise and strong technical leadership presence. Our work involves complex multi-tenant architectures, federated identity systems, and enterprise-scale, AI-native media-generation use cases on GCP. This is a hands-on senior role—owning architectural decisions while leading engineering teams through complex identity, multi-tenancy, and API management challenges.
This is a technical leadership role, not a people-management one: you’ll lead through architecture, credibility, and influence rather than a reporting line.
Actively Hiring
We are hiring for a current opening on an active client project. This is a specific, presently open role. We review applications on a rolling basis and aim to move qualified candidates through our process promptly.
What You’ll Do
- Own end-to-end GCP architecture across GKE, Vertex AI, VPC Service Controls, Cloud IAM/STS, BigQuery, Firestore, and Cloud Storage—making and defending design decisions that are secure, scalable, and operationally sound.
- Design delegated identity and federated auth systems using OAuth, Workload Identity Federation, STS token exchange, and Token Broker patterns—ensuring secure, keyless service-to-service authentication across the platform.
- Architect multi-tenant environments using Project-per-tenant isolation, identity-to-Service-Account mapping, and API gateway routing strategies that enforce strict tenant boundaries at every layer.
- Design and implement MCP (Model Context Protocol) server/client architectures, including authentication flows that integrate securely with the broader platform identity model.
- Lead API management strategy—evaluating and recommending between Apigee, Kong, and Google Cloud API Gateway based on multi-tenancy, auth, and performance requirements—and produce a vendor-selection recommendation and integration-design specification.
- Produce Architecture Decision Records (ADRs), architecture diagrams, and data flow documentation that clearly communicate design rationale to both engineering teams and executive stakeholders.
- Act as technical lead and advisor for engineering teams—unblocking decisions, setting standards, and ensuring architectural alignment from design through delivery.
- Translate complex business and product requirements into robust, scalable technical solutions, leading stakeholder-facing technical conversations with clarity and confidence.
- Experience integrating AI-native tooling and large language models into engineering workflows—using them to accelerate throughput and strengthen technical discovery.
What We’re Looking For
- 8+ years across solutions architecture, cloud platform engineering, or related roles, with a proven track record of delivering enterprise-grade GCP platforms in production.
- Hands-on, production-level expertise across GKE, Vertex AI, VPC Service Controls, Cloud IAM/STS, BigQuery, Firestore, and Cloud Storage—able to make and defend design decisions at each layer.
- Deep experience designing delegated identity systems using OAuth, Workload Identity Federation, STS token exchange, and Token Broker patterns in multi-tenant cloud environments.
- Proven ability to design Project-per-tenant isolation models, identity-to-Service-Account mappings, and API gateway routing strategies that enforce strict tenant boundaries at scale.
- Familiarity with Model Context Protocol (MCP) server/client architecture and the ability to design secure authentication flows that integrate with enterprise identity systems.
- Experience evaluating and implementing API management solutions—Apigee, Kong, Google Cloud API Gateway—with a clear understanding of trade-offs across multi-tenancy, auth, and performance requirements.
- Demonstrated ability to produce high-quality ADRs, architecture diagrams, and data flow documentation; strong stakeholder-facing technical communication skills.
- Skilled at leading through influence—commanding technical conversations, aligning cross-functional teams, and driving decisions without a formal reporting line.
- Strong written and verbal communication skills in English.
Why Lumenalta is an amazing place to work at
At Lumenalta, you can expect that you will:
- Be 100% dedicated to one project at a time so that you can innovate and grow.
- Be a part of a team of talented and friendly senior-level developers.
- Work on projects that allow you to use leading tech.
Location
This is a fully remote position; however, candidates must be based in regions that align with the Pacific, Central, or Eastern U.S. time zones to ensure effective collaboration with client and team schedules.
Application Deadline
Applications will be accepted until July 12th, 2026. Candidates can expect feedback by July 20, 2026.