Job description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world. Job Description Key Responsibilities Foundation & Landing Zone • Design and operate the Google Cloud resource hierarchy: organization, folders, and projects per environment and per tenant, with organization policy and labels • Own identity and access: IAM roles (predefined and custom), service accounts, Workload Identity Federation, short-lived credentials, and least-privilege reviews • Own networking: VPC design, Private Google Access, Private Service Connect, firewall policy, and DNS Security & Perimeters • Implement VPC Service Controls perimeters and the controlled egress gate between the client and Capgemini environments • Own encryption and secrets: Cloud KMS with customer-managed keys, Secret Manager, and key rotation • Run Sensitive Data Protection (DLP) scanning and de-identification at the landing boundary, with audit logging and retention for PII reads • Provide the control evidence that supports GLBA, Fair Lending, UDAAP, and TCPA/CAN-SPAM alignment Data & Application Services • Operate the data services: Cloud Storage lifecycle and retention, BigQuery administration (datasets, reservations, policy tags, row and column security, CMEK), Pub/Sub, Dataflow, Datastream, and Spanner including Spanner Graph • Operate the application tier: Cloud Run services, Artifact Registry, Cloud Build, Cloud Scheduler, and Workflows, including run-time settings, scaling, and concurrency • Provide the foundation Databricks on GCP needs: projects, VPC, service accounts, and GCS buckets Delivery & Automation • Provision everything as code with Terraform, with CI/CD promotion gates, policy-as-code checks, and drift detection • Own release management for Cloud Run services: revisions, traffic splitting, rollback, and image hygiene Reliability, Cost & Observability • Own Cloud Logging, Monitoring, and Trace: service-level objectives, alerting, runbooks, and incident response • Own disaster recovery and high availability design: backup, regional and multi-region choices, and RPO and RTO targets • Own FinOps: billing export to BigQuery, budgets and alerts, labels, committed use and reservation decisions, and cost allocation per tenant • Meet the serving contract the agentic layer depends on: predictable latency and per-client isolation Required Qualifications • 5+ years of cloud or platform engineering experience, including production Google Cloud • Deep GCP fluency: IAM, VPC and Private Service Connect, VPC Service Controls, Cloud Run, BigQuery, Cloud Storage, Pub/Sub, and Cloud KMS • Terraform and CI/CD for cloud infrastructure • Security engineering on GCP: organization policy, audit logging, secrets management, CMEK, and Sensitive Data Protection • Observability design: Cloud Monitoring, Logging, alerting, and service-level objectives • Strong scripting in Python or Bash, and working SQL for BigQuery administration • Experience in regulated industries, ideally financial services: data residency, consent frameworks, GLBA, Fair Lending, and UDAAP • Ability to operate in client-facing consulting delivery contexts, translating business requirements into technical specifications Preferred Qualifications • Google Cloud Professional certification (Cloud Architect, Cloud Security Engineer, or Cloud DevOps Engineer) • Operating Spanner (including Spanner Graph), Dataflow, and Datastream in production • Databricks on GCP deployment: workspaces, networking, and Unity Catalog storage setup • Multi-tenant isolation design and per-tenant cost allocation • Infrastructure for clean rooms and privacy-preserving data exchange • Familiarity with agent observability tooling (LangSmith, LangGraph) as a platform operator The base compensation range for this role in the posted location is 71774 - 105000 Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law. The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction. These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity. It is not typical for candidates to be hired at or near the top of the posted compensation range. In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws. Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include: • Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave • Medical, dental, and vision coverage (or provincial healthcare coordination in Canada) • Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada) • Life and disability insurance • Employee assistance programs • Other benefits as provided by local policy and eligibility Important Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini’s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation. Disclaimers Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law. This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact. Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process. Click the following link for more information on your rights as an Applicant in the United States. capgemini.com Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.

Requirements

Must-haves

Foundation & Landing Zone
Design and operate the Google Cloud resource hierarchy: organization, folders, and projects per environment and per tenant, with organization policy and labels
Own identity and access: IAM roles (predefined and custom), service accounts, Workload Identity Federation, short-lived credentials, and least-privilege reviews
Own networking: VPC design, Private Google Access, Private Service Connect, firewall policy, and DNS
Security & Perimeters
Implement VPC Service Controls perimeters and the controlled egress gate between the client and Capgemini environments
Own encryption and secrets: Cloud KMS with customer-managed keys, Secret Manager, and key rotation
Run Sensitive Data Protection (DLP) scanning and de-identification at the landing boundary, with audit logging and retention for PII reads
Provide the control evidence that supports GLBA, Fair Lending, UDAAP, and TCPA/CAN-SPAM alignment
Data & Application Services
Operate the application tier: Cloud Run services, Artifact Registry, Cloud Build, Cloud Scheduler, and Workflows, including run-time settings, scaling, and concurrency
Provide the foundation Databricks on GCP needs: projects, VPC, service accounts, and GCS buckets

Nice-to-haves

Google Cloud Professional certification (Cloud Architect, Cloud Security Engineer, or Cloud DevOps Engineer)
Operating Spanner (including Spanner Graph), Dataflow, and Datastream in production
Databricks on GCP deployment: workspaces, networking, and Unity Catalog storage setup
Multi-tenant isolation design and per-tenant cost allocation
Infrastructure for clean rooms and privacy-preserving data exchange
Familiarity with agent observability tooling (LangSmith, LangGraph) as a platform operator
The base compensation range for this role in the posted location is 71774 - 105000
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.
Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
Life and disability insurance

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

gcpci/cdpythonsqlaccessibilityai

Platform: successfactors
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off