Google Cloud Platform Platform/Cloud Ops Engineer

Designs, implements, and maintains cloud-based infrastructure and services on Google Cloud Platform. Builds and deploys cloud solutions, optimizes performance and scalability, ensures security and compliance, and troubleshoots technical issues supporting enterprise-scale cloud operations across business units / Google Cloud Platform projects., * Design cloud infrastructure solutions based on business requirements and Google Cloud Platform best practices, translating architecture decisions into well-structured, tested, production-ready code.

• Develop and maintain cloud architecture patterns, reference architectures, and design principles.
• Ensure strict adherence to cloud architecture standards, schematic protocols, and engineering best practices established by the platform team.
• Optimize resource allocation, scaling, and configuration to meet performance and reliability requirements across Google Cloud Platform workloads.
• Participate in design reviews, contributing technical input on scalability, security, and operational considerations for platform changes.
• Support platform reliability: respond to incidents, perform root cause analysis, and drive remediations that prevent recurrence.
• Participate in an on-call rotation supporting the Google Cloud Platform

Infrastructure as Code & Automation

• Implement automation and DevOps practices to streamline cloud operations and eliminate manual toil.
• Write and maintain Terraform modules following team IaC standards - reusable, well-documented, and integrated into CI/CD pipelines.
• Build and maintain CI/CD and GitHub Actions pipelines for platform infrastructure and shared tooling used by application teams.
• Apply policy-as-code patterns using Google Cloud Platform Org Policies to enforce guardrails across the platform at scale.

Networking, Security & Compliance

• Define and enforce cloud security policies, controls, and risk mitigation protocols aligned to enterprise standards: IAM least-privilege design, Workload Identity Federation, Secret Manager integration, and Binary Authorization.
• Engineer Google Cloud Platform networking configurations: Shared VPC, VPC Service Controls, Private Service Connect, Cloud NAT, and hybrid connectivity via Cloud Interconnect or HA VPN.
• Support continuous compliance requirements (HIPAA, PCI, SOC 2) by implementing automated control enforcement and evidence collection.
• Integrate observability tooling - Cloud Operations Suite, Grafana, Splunk - into platform components so workloads have logging, metrics, and alerting from day one.

Documentation, Collaboration & Growth

• Establish and maintain technical documentation - runbooks, SOPs, and onboarding materials - so platform knowledge is distributed and not dependent on any individual.
• Coach junior team members through knowledge sharing, code reviews, and pair programming.
• Collaborate with engineering, architecture, security, and DevOps teams to deliver platform capabilities on schedule.
• Pursue professional development and certification in cloud-related domains.

• 5-7 years of cloud/infrastructure engineering experience, with 3+ years hands-on Google Cloud Platform at enterprise scale.
• Strong problem-solving and decision-making ability in complex, ambiguous cloud environments.
• Strong cross-functional collaboration skills across engineering, security, and business stakeholders.
• Demonstrated ability to learn new Google Cloud Platform services quickly and grow technically over time.
• Track record of planning, building, and supporting production platform infrastructure end-to-end.
• Proven delivery of production Google Cloud Platform infrastructure using Terraform - modules, remote state, CI/CD integration.

• Solid working knowledge across core Google Cloud Platform domains:

• Compute & Containers: GKE (Autopilot + Standard), Cloud Run, Compute Engine
• Networking: Shared VPC, VPC Service Controls, Private Service Connect, Cloud Armor
• Data & Messaging: BigQuery, Pub/Sub, Cloud Storage, Cloud Composer
• Security: IAM, Workload Identity, Secret Manager, Security Command Center
• IaC & Automation: Terraform, Cloud Build, GitHub Actions, Artifact Registry
• Observability: Grafana, Cloud Operations Suite, Datadog, SLO/SLI fundamentals

Proficiency in Python or Go; Bash scripting expected.

Experience in regulated environments and security control frameworks (HIPAA, PCI, or SOC 2).

Preferred Qualifications

• Google Professional Cloud Architect or Professional Cloud DevOps Engineer certification (upgraded from Associate - better signals senior-level scope)
• HashiCorp Terraform Associate certification.
• Hands-on FinOps experience: committed use discounts, rightsizing, cost allocation tagging., * Bachelor’s degree in Computer Science, Engineering, or related field preferred; equivalent professional experience considered in lieu of degree.