Data Platform Engineer GCP (IT) / Freelance

Job summary

The role secures and operates a hybrid, multi-region Google Cloud data platform connected to an on-premises datacenter. Responsibilities include troubleshooting network connectivity, deploying private services for Cloud Run, migrating Kafka traffic to Cloud Interconnect, and automating network and security infrastructure with Terraform and GitLab CI. The engineer also configures private DNS, Zero Trust access, identity, and encryption controls, and supports application teams with secure API integration.

Qualifications

• Hands-on experience with hybrid GCP network architectures.
• Ability to independently troubleshoot cross-premises network issues with network and security teams.
• Experience producing technical architecture documents, network flow matrices, and operational runbooks.
• Knowledge of Cloud Interconnect, NCC, Cloud Router, BGP, inter-region routing, and VPC spokes.
• Experience with internal L7 load balancers, Serverless NEGs, Cloud Run, and Direct VPC Egress.
• Advanced Terraform and GitLab CI experience.
• Knowledge of hybrid DNS, Cloud Armor, IAP, OIDC/SAML, PingFederate, and KMS/CMEK.
• Experience troubleshooting networks and Kafka streaming traffic.
• Ability to work autonomously, document carefully, advise application teams, and transfer knowledge.
• Banking or highly regulated industry experience is preferred.

Responsibilities

• Troubleshoot connectivity, routing, and firewall issues between enterprise workstations and internal GCP load balancers.
• Connect data VPC spokes to the central NCC hub and validate BGP routing.
• Deploy internal L7 load balancers and Serverless NEGs for Cloud Run microservices.
• Configure DNS peering and private Cloud DNS zones.
• Build reusable Terraform modules for network and security infrastructure across development, staging, pre-production, and production.
• Migrate Kafka streaming traffic to the dedicated Cloud Interconnect link.
• Configure Zero Trust access policies using Cloud Armor, IAP, and PingFederate.
• Provision and secure private-IP Cloud SQL databases, including KMS/CMEK encryption controls.
• Advise application teams on securing APIs.
• Produce architecture documentation, network flow matrices, acceptance testing materials, and troubleshooting runbooks.
• Transfer operational knowledge to platform engineers.

Skills

Certifications

Industry

Relocation