Senior Product Owner

Job Description Key Responsibilities Foundation & Landing Zone • Design and operate the Google Cloud resource hierarchy: organization, folders, and projects per environment and per tenant, with organization policy and labels • Own identity and access: IAM roles (predefined and custom), service accounts, Workload Identity Federation, short-lived credentials, and least-privilege reviews • Own networking: VPC design, Private Google Access, Private Service Connect, firewall policy, and DNS Security & Perimeters • Implement VPC Service Controls perimeters and the controlled egress gate between the client and Capgemini environments • Own encryption and secrets: Cloud KMS with customer-managed keys, Secret Manager, and key rotation • Run Sensitive Data Protection (DLP) scanning and de-identification at the landing boundary, with audit logging and retention for PII reads • Provide the control evidence that supports GLBA, Fair Lending, UDAAP, and TCPA/CAN-SPAM alignment Data & Application Services • Operate the data services: Cloud Storage lifecycle and retention, BigQuery administration (datasets, reservations, policy tags, row and column security, CMEK), Pub/Sub, Dataflow, Datastream, and Spanner including Spanner Graph • Operate the application tier: Cloud Run services, Artifact Registry, Cloud Build, Cloud Scheduler, and Workflows, including run-time settings, scaling, and concurrency • Provide the foundation Databricks on GCP needs: projects, VPC, service accounts, and GCS buckets Delivery & Automation • Provision everything as code with Terraform, with CI/CD promotion gates, policy-as-code checks, and drift detection • Own release management for Cloud Run services: revisions, traffic splitting, rollback, and image hygiene Reliability, Cost & Observability • Own Cloud Logging, Monitoring, and Trace: service-level objectives, alerting, runbooks, and incident response • Own disaster recovery and high availability design: backup, regional and multi-region choices, and RPO and RTO targets • Own FinOps: billing export to BigQuery, budgets and alerts, labels, committed use and reservation decisions, and cost allocation per tenant • Meet the serving contract the agentic layer depends on: predictable latency and per-client isolation Required Qualifications • 5+ years of cloud or platform engineering experience, including production Google Cloud • Deep GCP fluency: IAM, VPC and Private Service Connect, VPC Service Controls, Cloud Run, BigQuery, Cloud Storage, Pub/Sub, and Cloud KMS • Terraform and CI/CD for cloud infrastructure • Security engineering on GCP: organization policy, audit logging, secrets management, CMEK, and Sensitive Data Protection • Observability design: Cloud Monitoring, Logging, alerting, and service-level objectives • Strong scripting in Python or Bash, and working SQL for BigQuery administration • Experience in regulated industries, ideally financial services: data residency, consent frameworks, GLBA, Fair Lending, and UDAAP • Ability to operate in client-facing consulting delivery contexts, translating business requirements into technical specifications Preferred Qualifications • Google Cloud Professional certification (Cloud Architect, Cloud Security Engineer, or Cloud DevOps Engineer) • Operating Spanner (including Spanner Graph), Dataflow, and Datastream in production • Databricks on GCP deployment: workspaces, networking, and Unity Catalog storage setup • Multi-tenant isolation design and per-tenant cost allocation • Infrastructure for clean rooms and privacy-preserving data exchange • Familiarity with agent observability tooling (LangSmith, LangGraph) as a platform operator The base compensation range for this role in the posted location is 71774 - 105000 Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law. The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction. These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity. It is not typical for candidates to be hired at or near the top of the posted compensation range. In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws. Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include: • Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave • Medical, dental, and vision coverage (or provincial healthcare coordination in Canada) • Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada) • Life and disability insurance • Employee assistance programs • Other benefits as provided by local policy and eligibility