Skip to content

Open nowPosted 3 hours agoWe saw it 94 min after it went up

GCP Administrator (AI Agent Platform & Security)

FirmaTRUST

Where
Lahore, Punjab, Pakistan
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGCP Administrator (AI Agent Platform & Security)FirmaTRUST · Lahore, Punjab, Pakistan
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on FirmaTRUST's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted 3 hours ago

The posting

Who We Are:

We are a privately owned leading Managed IT Services company (Managed Service Provider). Since 1996, we have specialized in providing a full range of services, including Network & Security, UNIX/Linux & Windows Engineering, Systems & Database Administration, on-premises and cloud services, Help Desk Support, VoIP Support, and managed IT infrastructure for small and medium-sized enterprises.

At FirmaTRUST, we are committed to delivering reliable, secure, and innovative technology solutions to our clients. We are looking for highly skilled and passionate cloud infrastructure professionals who can help elevate our services and drive the growth and success of our company.

Role overview

We need a qualified Google Cloud (GCP) administrator. The role owns day-to-day administration, security, and reliability of the client's AI agent and application workloads on GCP, Gemini Enterprise Agent Platform, Harness delivery pipelines, Model Armor, and Cloud Armor.

Requirements

Key responsibilities

Gemini Enterprise Agent Platform

  • Administer the Agent Platform and the Gemini Enterprise app for the client projects, environments, quotas, billing alerts, and API enablement.
  • Deploy, version and operate agents on Agent Runtime, including agents built with Agent Studio and the Agent Development Kit (ADK).
  • Manage Model Garden access, model endpoints, Sessions, Memory Bank, RAG Engine and Vector Search configurations.
  • Govern agents through Agent Identity, the agent registry, and Agent Gateway; enforce least-privilege IAM for agents, tools, and MCP servers.
  • Publish approved agents to the Gemini Enterprise app and manage user access, connectors and data sources.
  • Monitor agent health, latency, cost and quality using Agent Observability, Cloud Monitoring, Cloud Logging and Cloud Trace.

Harness (CI/CD and release automation)

  • Administer Harness pipelines that build, test and deploy the client's agent and application workloads to GCP.
  • Maintain delegates, connectors, secrets, environments and approval gates for GCP targets (Cloud Run, GKE, Agent Runtime).
  • Embed policy checks, security scans and rollback strategies into release pipelines.
  • Keep infrastructure-as-code (Terraform) and pipeline definitions version-controlled and peer-reviewed.

Model Armor (AI security)

  • Create and maintain Model Armor templates and floor settings that screen prompts, responses and tool output.
  • Configure filters for prompt injection, jailbreak attempts, sensitive data (via Sensitive Data Protection), harmful content and malicious URLs.
  • Integrate Model Armor with Agent Gateway and agent code so all agent traffic is inspected.
  • Review findings in Security Operations Center, tune false positives, and report on blocked threats.

Cloud Armor (application security)

  • Manage Cloud Armor security policies for the client's external load balancers and public-facing applications.
  • Maintain WAF rules (OWASP Top 10), rate limiting, bot management, geo and IP allow/deny lists.
  • Enable and tune Adaptive Protection for layer-7 DDoS detection; respond to attack alerts.

Core GCP administration

  • Manage the resource hierarchy, IAM, service accounts, organization policies and VPC Service Controls.
  • Administer networking: VPCs, Private Service Connect, Cloud NAT, load balancers and DNS.
  • Run patching, backup, disaster recovery and capacity planning for in-scope workloads.
  • Handle incidents and change requests within agreed SLAs, maintain runbooks and architecture documentation.
  • Track and optimize cloud spend, report monthly to the Leadership team

Required qualifications

  • 5+ years in cloud infrastructure or systems administration, with at least 3 years administering production GCP environments.
  • Hands-on experience with Vertex AI or the Gemini Enterprise Agent Platform: deploying models or agents, managing endpoints and controlling access.
  • Working knowledge of Model Armor templates and Cloud Armor security policies, including WAF and rate-limiting rules.
  • 2+ years administering Harness (or a comparable CI/CD platform such as Cloud Build, GitLab CI or Jenkins) for GCP deployments.
  • Strong GCP IAM, networking (VPC, Private Service Connect, load balancing) and VPC Service Controls skills.
  • Infrastructure-as-code with Terraform; scripting in Python, Bash or Go; fluent with gcloud CLI.
  • Experience with Cloud Monitoring, Cloud Logging and alerting, on-call and incident response in a client-facing setting. Bachelor's degree in Computer Science, IT or a related field, or equivalent experience.
  • Certifications (at least one required): Google Cloud Professional Cloud Architect, Professional Cloud Security Engineer, or Associate Cloud Engineer.

Preferred qualifications and soft skills

  • Google Cloud Professional Machine Learning Engineer or Generative AI Leader certification; Harness Certified Continuous Delivery Administrator.
  • Experience with Agent Gateway, Agent Identity, MCP servers and the Agent Development Kit.
  • Familiarity with Sensitive Data Protection, Security Command Center and Cloud Run or GKE.
  • Background supporting retail, beauty or consumer-goods clients, including e-commerce traffic peaks.
  • Clear written and spoken communication with both technical teams and business stakeholders.
  • Ownership mindset: documents work, raises risks early, and follows changes through to closure.
  • Comfortable working in an ITIL-style change and incident process with client approvals.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against FirmaTRUST's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on FirmaTRUST's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    FirmaTRUST's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.