Architecture & landing-zone setup
Net-new Google Cloud organization design and landing-zone setup for customers moving workloads to Google Cloud, especially those with regulatory requirements.
- Organization, folder, and project structure design
- Shared VPC with appropriate egress controls
- CMEK setup with Cloud KMS for end-to-end encryption
- IAM policy design and Workload Identity Federation
- Cloud Audit Logs configuration and SIEM integration
- Multi-environment setup: dev / staging / production
