F

FirmaTRUST

GCP Administrator - AI Agent Platform & Security

Cloud EngineeringPosted on Nov 12
Full-timeLahore, Punjab, PakistanNo salary listed

About the Job

Requirements

  • At least 5 years of experience in cloud infrastructure or systems administration, including at least 3 years administering production Google Cloud Platform (GCP) environments.
  • Hands-on experience with Vertex AI or the Gemini Enterprise Agent Platform, including deploying models or agents, managing endpoints, and controlling access.
  • Working knowledge of Model Armor templates and Cloud Armor security policies, including web application firewall and rate-limiting rules.
  • At least 2 years administering Harness or a comparable continuous integration and continuous delivery platform, such as Cloud Build, GitLab CI, or Jenkins, for GCP deployments.
  • Strong GCP identity and access management, networking (virtual private cloud, Private Service Connect, and load balancing), and VPC Service Controls skills.
  • Infrastructure as code experience with Terraform; scripting experience in Python, Bash, or Go; and fluency with the gcloud command-line interface.
  • Experience with Cloud Monitoring, Cloud Logging and alerting, on-call duties, and incident response in a client-facing setting.
  • A bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
  • At least one required certification: Google Cloud Professional Cloud Architect, Professional Cloud Security Engineer, or Associate Cloud Engineer.
  • Clear written and spoken communication with technical teams and business stakeholders.
  • Ability to document work, raise risks early, and follow changes through to closure.
  • Comfort with an ITIL-style change and incident process with client approvals.

Responsibilities

  • Administer the Gemini Enterprise Agent Platform and app for client projects, including environments, quotas, billing alerts, and API enablement.
  • Deploy, version, and operate agents on Agent Runtime, including agents built with Agent Studio and the Agent Development Kit.
  • Manage Model Garden access, model endpoints, Sessions, Memory Bank, RAG Engine, and Vector Search configurations.
  • Govern agents using Agent Identity, the agent registry, and Agent Gateway; enforce least-privilege identity and access management for agents, tools, and MCP servers.
  • Publish approved agents to the Gemini Enterprise app and manage user access, connectors, and data sources.
  • Monitor agent health, latency, cost, and quality using Agent Observability, Cloud Monitoring, Cloud Logging, and Cloud Trace.
  • Administer Harness pipelines that build, test, and deploy client agent and application workloads to GCP.
  • Maintain delegates, connectors, secrets, environments, and approval gates for GCP targets, including Cloud Run, GKE, and Agent Runtime.
  • Embed policy checks, security scans, and rollback strategies into release pipelines.
  • Keep Terraform infrastructure-as-code and pipeline definitions version-controlled and peer-reviewed.
  • Create and maintain Model Armor templates and floor settings that screen prompts, responses, and tool output.
  • Configure filters for prompt injection, jailbreak attempts, sensitive data via Sensitive Data Protection, harmful content, and malicious URLs.
  • Integrate Model Armor with Agent Gateway and agent code so all agent traffic is inspected.
  • Review findings in the Security Operations Center, tune false positives, and report on blocked threats.
  • Manage Cloud Armor security policies for client external load balancers and public-facing applications.
  • Maintain web application firewall rules for the OWASP Top 10, rate limiting, bot management, geographic and IP allow/deny lists.
  • Enable and tune Adaptive Protection for layer-7 distributed denial-of-service detection, and respond to attack alerts.
  • Manage the resource hierarchy, identity and access management, service accounts, organization policies, and VPC Service Controls.
  • Administer networking, including virtual private clouds, Private Service Connect, Cloud NAT, load balancers, and DNS.
  • Run patching, backup, disaster recovery, and capacity planning for in-scope workloads.
  • Handle incidents and change requests within agreed service-level agreements, and maintain runbooks and architecture documentation.
  • Track and optimize cloud spend and report monthly to the Leadership team.

Desired Qualifications

  • Google Cloud Professional Machine Learning Engineer or Generative AI Leader certification, or Harness Certified Continuous Delivery Administrator.
  • Experience with Agent Gateway, Agent Identity, MCP servers, and the Agent Development Kit.
  • Familiarity with Sensitive Data Protection, Security Command Center, and Cloud Run or GKE.
  • Background supporting retail, beauty, or consumer-goods clients, including e-commerce traffic peaks.

About the Company

FirmaTRUST

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at FirmaTRUST

See more jobs