GCP Network Engineer - Remote

Serves as the senior network engineer executing s NCC transition. Leads the design and implementation of GCP network solutions tailored to needs, ensuring risk mitigation and compliance across systems. Builds the Terraform Infrastructure-as-Code that stands up the NCC hub, spokes, route tables, hybrid attachments, and DMZ insertion; authors the migration runbook; and executes wave-based production cutovers of Shared VPCs, Hub VPCs, and DMZ followed by decommission of the legacy peering mesh., Design Terraform module structure and repository scaffolding aligned to existing IaC. Develop Terraform for the NCC hub, spokes, route tables, hybrid attachments, and DMZ insertion. Build and iteratively test in a mock lab; produce code documentation and READMEs; run code-review cycles and rework with. Author the migration Method of Procedure (MOP) a step-by-step runbook plus test/validation plans (routing and application connectivity per step) and rollback procedures. Surface pilot-workload dependencies (one non-production workload), plan change windows, and provide pilot execution guidance and advisory during the change window. Productionize Terraform (harden, parameterize, environment promotion) and run pre-cutover dry-runs / staging rehearsals per wave. Execute BU Shared VPC production cutovers (up to eight production VPCs) in off-hours change windows, supplier-led alongside. Support high-risk central events Hub VPC + CCI/Azure cutover and DMZ / Palo Alto egress cutover with post-cutover validation and traffic verification. Provide hypercare / stabilization and rollback / war-room standby following each wave. Execute legacy VPC Peering decommission and cleanup; deliver as-built documentation and production runbook updates.

Primary Deliverables NCC Terraform modules (hub, spokes, route tables, hybrid attachments, DMZ) and mock-lab validation results. Migration MOP (step-by-step runbook), test / validation plans, and rollback procedures. Pilot execution support and post-pilot lessons-learned report; self-service framework handoff. Productionized Terraform and executed cutovers for in-scope BU Shared VPCs, Hub VPCs (CCI/Azure), and DMZ. Post-cutover validation and hypercare; legacy VPC Peering decommission; as-built documentation and production runbooks., Google Cloud networking Network Connectivity Center (NCC), Shared VPC, VPC Peering, Cloud Router, BGP, route tables, IPAM, and Cloud DNS; Cloud Interconnect / Cross-Cloud Interconnect to Azure; DMZ / Palo Alto egress inspection; and Terraform / Infrastructure-as-Code for network automation, including mock-lab validation and wave-based production cutovers. Engagement Details & Working Arrangement Delivery model: Dedicated consulting resource supporting NCC Transition workstream the migration of GCP network from a VPC Peering hub-and-spoke topology to a Network Connectivity Center (NCC) fabric.

Extensive network engineering experience with deep, hands-on GCP networking delivery. Expert Terraform / Infrastructure-as-Code for network automation modules, scaffolding, and production hardening. Strong hands-on skills across NCC, Shared VPC, VPC Peering, Cloud Router, BGP, route tables, and IPAM. Experience with hybrid connectivity (Cloud Interconnect / Cross-Cloud Interconnect to Azure) and DMZ / egress inspection (e.g., Palo Alto). Proven execution of production network cutovers in off-hours change windows, including validation, rollback, and hypercare. Strong documentation (MOP / runbooks, READMEs, as-builts) and disciplined code review., Google Cloud Professional Cloud Network Engineer certification. Direct NCC implementation experience (hub / spokes / route tables / hybrid attachments / DMZ insertion). Mock-lab / staging-rehearsal and wave-based migration experience. Multi-cloud (GCP Azure) routing and BGP troubleshooting. Experience in large, regulated, enterprise-scale (e.g., retail) environments.

3.63.6 out of 5 stars Remote $80 - $100 an hour - Contract