Cloud Platform Engineer (GCP)

Job summary

Design and implement a secure, compliant Google Cloud Platform foundation for production and AI workloads in a regulated financial services environment. Build modular Terraform infrastructure, CI/CD pipelines, IAM and networking controls, security hardening, and policy-as-code guardrails, then document the platform and transfer knowledge to client teams.

Qualifications

• Hands-on experience structuring modular Terraform in enterprise GCP environments.
• Experience building automation pipelines for infrastructure delivery and testing.
• Strong knowledge of GCP IAM, RBAC, service account management, and security controls.
• Expertise in GCP enterprise networking, including Shared VPCs, firewalls, Cloud DNS, Private Service Connect, Interconnect, and VPN.
• Hands-on experience implementing STIG or CIS benchmarks.
• Experience enforcing platform guardrails programmatically using OPA/Rego, Organization Policy, or Terraform policy checks.
• Experience enabling cloud platform services in enterprise production environments.
• Ability to collaborate with Security, IAM, Networking, Architecture, and Operations teams.
• Strong technical writing and stakeholder management skills.

Responsibilities

• Design, build, and maintain reusable Terraform modules for GCP organization, folder, project, and service resources.
• Develop CI/CD pipelines to plan, test, scan, and deploy infrastructure and policy changes with approval gates and audit trails.
• Implement IAM, RBAC, least-privilege access, service account lifecycles, Workload Identity, and privileged access patterns.
• Build and secure VPCs, firewall policies, Cloud DNS, and private connectivity.
• Apply STIG or CIS benchmarks and implement enterprise security controls.
• Enforce platform guardrails using GCP Organization Policy, OPA/Rego, Terraform policy checks, or equivalent tools.
• Onboard enterprise cloud and platform services with controls, patterns, and runbooks for safe production use.
• Facilitate design sessions, present technical decisions, and provide documentation and training to client teams.

Skills

Certifications

Work schedule

Industry

Contract length

Security clearance

Relocation