cloud engineer

Serve as the embedded Cloud Engineering contact for assigned product teams and vendor delivery teams. Translate product and vendor requirements into cloud designs that fit published standards on Google Cloud Platform. Build the product’s infrastructure as code in the product-owned Terraform repository, including project structure, IAM, database access, VPC, and pipelines. Stay with the team through first deployments to validate prerequisites, prove environment promotion, and fix defects. Provide operational support after go-live for issues related to access, connectivity, capacity, cost, and security findings. Review infrastructure code, pull requests, and architecture decision records against Cloud Engineering standards. Act as the cloud counterpart to external delivery partners, ensuring their designs align with security, network, and identity boundaries. Apply and tune security controls at the product boundary, such as VPC Service Controls, organization policies, and Identity-Aware Proxy. Convert repeated product shapes into reusable assets, contributing to the Terraform module library. Ensure all effort is traceable through Jira work items tied to the source product.

10+ years in a hands-on role such as cloud engineering, platform engineering, or solutions engineering supporting application teams. Experience with Google Cloud Platform, including projects, IAM, Shared VPC, Private Service Connect, Cloud DNS, Cloud Run, Cloud SQL, and Pub/Sub. Working knowledge of Microsoft Azure, including subscriptions, Entra ID, virtual networking, and Azure Firewall. Proficiency with Terraform, including authoring modules and managing remote state in CI workflows. Experience building CI/CD pipelines in Azure DevOps or Cloud Build with keyless authentication through Workload Identity Federation. Understanding of cloud networking and identity principles such as DNS, TLS, OAuth2/OIDC, and least-privilege design. Demonstrated ability to diagnose production issues using logs, audit trails, and IAM policy state. Experience working directly with product owners and application developers to gather requirements and create documentation. Strong written communication skills for creating design rationale, review findings, and handoff documents. Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.

Preferred Qualifications

Google Professional Cloud Architect or Microsoft Certified: Azure Solutions Architect Expert certification. Experience with VPC Service Controls, organization policy, and domain-restricted sharing on Google Cloud Platform. Experience consuming an API management platform like Apigee X from the workload side. Experience with GKE or other Kubernetes platforms. Experience with Pub/Sub, Kafka, or other event-driven integration on Google Cloud Platform. Experience as the cloud-side counterpart to a vendor-delivered platform. Familiarity with FinOps practices, including cost estimation and spend review. Experience operating within a Product, Agile, or DevSecOps framework. Exposure to supply chain, distribution, or logistics domains.