Terraform / DevOps Engineer (GCP Infrastructure as Code)

Own the design, implementation, and operation of all GCP infrastructure for a greenfield data platform (development, QA/UAT, production environments).

• Build and manage all cloud resources and data governance (storage, datasets, permissions, container services, orchestration) using Terraform exclusively; no manual resource creation.
• Design and implement the platform’s security and IAM model, including custom roles, service accounts, workload identity federation, and least-privilege access.
• Develop and maintain a CI/CD pipeline for infrastructure as code, ensuring controlled, gated deployments across all environments.
• Lead private networking setup for secure, on-premise connectivity (VPC, Private Service Connect, firewall rules, serverless connectors).
• Deliver comprehensive data governance as code, including BigQuery taxonomies, policy tags, column-level security, and dynamic data masking.
• Collaborate with client platform teams to manage organizational policy exceptions, project provisioning, and escalated IAM requests.
• Provide client-facing communication: explain design decisions, run working sessions, and represent the solution in architecture and security reviews.
• Set infrastructure standards and best practices (module structure, naming, promotion conventions), review team changes, and mentor other engineers.
• Produce thorough documentation and ensure effective knowledge transfer to enable the data engineering team’s autonomy.

GCP (Good Clinical Practices), DevOps, Acceptance Testing, GCP (Good Clinical Practices), Production Systems, Quality Assurance, Data Sets, Cloud Computing, Data Storage, Resource Management, Preferred: Experience in regulated environments (e.g., healthcare), BigQuery governance via Terraform, Storage Transfer Service as code, Dataform repo management, and automation scripting (Python/Go).

• Onsite role at US client location; not remote or offshore.