Google Cloud Platform Network & Infrastructure Engineer

We are seeking an experienced Google Cloud Platform Network & Infrastructure Engineer to design, deploy, and manage enterprise-grade networking infrastructure on Google Cloud Platform. The ideal candidate brings deep expertise in Google Cloud Platform networking constructs - including VPC design, hybrid connectivity, load balancing, and firewall policy management - combined with strong proficiency in Python and Terraform to automate and codify network operations at scale. This role is pivotal in ensuring high availability, low-latency connectivity, and robust security posture across multi-region and hybrid cloud environments, working closely with platform, security, and application teams to deliver reliable and compliant network foundations for critical enterprise workloads., Architect and manage Google Cloud Platform Virtual Private Cloud (VPC) environments including Shared VPC topologies, VPC peering, subnet design, and IP address management (IPAM) strategies aligned with enterprise segmentation and multi-tenant requirements. Deploy and manage Dedicated and Partner Interconnect circuits, Cloud VPN tunnels (HA VPN), and BGP routing configurations to establish reliable, high-bandwidth, low-latency connectivity between on-premises data centres and Google Cloud Platform regions. Design and operate Google Cloud Platform load balancing solutions including External and Internal HTTP(S), TCP/SSL Proxy, and Network Load Balancers; configure backend services, health checks, URL maps, and SSL policies to ensure application availability and optimal traffic distribution. Configure and manage Cloud NAT gateways to provide controlled outbound internet access for private Google Cloud Platform instances, optimising NAT gateway sizing, port allocation, and logging to ensure scalability and full egress visibility. Design and enforce hierarchical firewall policies and VPC firewall rules to control ingress/egress traffic, implement tag-based and service-account-based rules, and regularly audit rule sets to eliminate over-permissive configurations. Implement VPC Service Controls to create security perimeters around sensitive Google Cloud Platform services, configure Cloud Armor WAF policies, manage SSL certificates, and enforce private Google access to restrict data exfiltration paths. Author, maintain, and version-control Terraform modules for all network components - VPCs, subnets, firewall rules, load balancers, NAT, and interconnects - ensuring repeatable, auditable, and drift-free network deployments. Develop Python scripts and Cloud Functions to automate network provisioning, firewall rule lifecycle management, IP allocation, and compliance checks; integrate automation workflows with CI/CD pipelines for continuous network governance. Configure and manage Cloud DNS (public and private zones), implement DNS peering for hybrid environments, and leverage Cloud Traffic Director or Cloud Endpoints for advanced service mesh and traffic routing requirements. Implement network observability using VPC Flow Logs, Firewall Rules Logging, Network Intelligence Center, and Cloud Monitoring dashboards; conduct proactive performance analysis and lead root cause investigations for network incidents. Conduct regular network capacity assessments, model traffic growth projections, optimise routing paths and interconnect utilisation, and recommend architectural changes to improve throughput, latency, and cost efficiency. Ensure network configurations adhere to enterprise security standards and regulatory frameworks (PCI-DSS, ISO 27001, SOC 2); maintain up-to-date network architecture documentation and support internal and external audit activities.

Deep hands-on expertise with Google Cloud Platform VPC, Shared VPC, Cloud Interconnect (Dedicated & Partner), HA VPN, Cloud NAT, Cloud DNS, Network Intelligence Center, and Cloud Armor across multi-region enterprise environments. Proven experience configuring Google Cloud Platform load balancers (External/Internal HTTP(S), TCP/SSL Proxy, Network Load Balancer), backend services, health checks, URL maps, and SSL policy management for production workloads. Strong expertise in Google Cloud Platform hierarchical firewall policies, VPC firewall rules (tag-based and service-account-based), security group equivalence, and systematic firewall rule auditing and lifecycle management. Proficiency in writing modular, reusable Terraform code for all Google Cloud Platform networking constructs; experience managing remote state, enforcing network policy via code, and integrating with CI/CD pipeline security gates. Practical Python scripting experience applied to network automation - IP management, firewall rule provisioning, compliance reporting, Google Cloud Platform API integration, and event-driven network remediation via Cloud Functions. Hands-on experience designing and operating Dedicated/Partner Interconnect and HA VPN with BGP dynamic routing, including failover testing, bandwidth planning, and on-premises integration with enterprise routing protocols. Solid understanding of VPC Service Controls, private Google access patterns, network segmentation principles, and compliance requirements (PCI-DSS, ISO 27001) as they apply to Google Cloud Platform network architecture.

CST provides its clients with complete, cost-effective, end-to-end personnel solutions across a range of industrial domains. CST's mission is to empower businesses around the world to make better, faster operational decisions.