Cloud Platform Engineer, GCP

This is a fully remote position, open to applicants in Canada.

📋 Description

• Design, develop, and sustain modular, reusable Terraform modules for GCP organization, folder, project, and service resources.

• Create CI/CD pipelines that plan, test, scan, and deploy infrastructure and policy modifications with approval gates and audit trails.

• Implement IAM, RBAC, and least-privilege models, which include service account lifecycles, Workload Identity, and privileged access patterns.

• Construct and secure VPCs, including Shared VPCs, firewall policies, Cloud DNS, and private connectivity options via Private Service Connect, Interconnect, and VPN.

• Apply STIG and/or CIS benchmarks and establish enterprise security controls across the platform and its services.

• Define and enforce guardrails utilizing GCP Organization Policy, OPA/Rego, Terraform policy checks, or similar tools.

• Integrate enterprise cloud and platform services into production with controls, patterns, and runbooks for secure usage.

• Lead design sessions, present technical choices, and provide thorough documentation and training to customer teams.

• Collaborate with the client's Security, IAM, Networking, Architecture, and Operations teams to translate business needs into platform capabilities.

• Provide complete documentation and knowledge transfer.

⛳️ Requirements

• Must reside in and be legally authorized to work in Canada.

• Demonstrated hands-on experience in structuring modular Terraform within enterprise GCP environments.

• Experience in constructing automation pipelines for infrastructure delivery and testing.

• Strong understanding of GCP IAM, RBAC, service account management, and security protocols.

• Proficiency in GCP enterprise networking, including Shared VPCs, firewalls, Cloud DNS, Private Service Connect, Interconnect, and VPN.

• Practical experience in implementing STIG and/or CIS benchmarks.

• Experience in programmatically enforcing platform guardrails using OPA/Rego, Org Policy, Terraform policy checks, or equivalent tools.

• Proven track record of enabling cloud platform services in enterprise production settings.

• Ability to collaborate effectively with Security, IAM, Networking, Architecture, and Operations teams.

• Exceptional technical writing and stakeholder management skills.

• Experience with Gemini Enterprise implementation or enablement.

• Google Cloud Professional Cloud Architect certification.

• Background in banking, financial services, or other highly regulated sectors.

• Experience supporting enterprise Governance, Risk, and Compliance processes.

• Familiarity with onboarding AI services into enterprise environments.

• Successful completion of background and security checks may be required prior to onboarding.

🏝️ Benefits

• Full-time workload of 40 hours/week.

• Contract duration of 14–16 weeks with the possibility of extension.