GCP Cloud Engineer

The GCP Cloud Engineer is responsible for implementing the designs and standards provided by the Cloud Architect and established by the Cloud Operations team as a whole and deploying application hosting environments using repeatable templates/tools/processes, with a primary focus on the GCP cloud platform within a DevOps structured team and methodology. Additionally, based on guidance by the Cloud Architect, configurations, automation, and tools that will allow cloud services to be consumed in an efficient manner should be established.  Ultimately, the Cloud Engineer is the primary resource assigned to projects targeted for cloud deployment. They are responsible for provisioning the application hosting environments and associated monitoring and reporting to accomplish project objectives while acting as the primary infrastructure point of contact on such projects.

They are also responsible for crafting, publishing, socializing, and overseeing adherence to the standards they establish and modifying them to achieve the strategic goals of OIT, and the tactical needs of the applications deployed to the cloud.  In addition, they will drive continuous improvement within the CloudOps team, as well as lifecycle management and exploration into evolving cloud-based solutions. They handle the day-to-day interactions with vendors partnered with to help meet work unit and organizational objectives. The engineer will be required to participate in a weekly after-hours on-call rotation. While on call, the Engineer will need to be available to assist in troubleshooting or resolve any production break-fix issues after hours. Individuals selected for this position will also need to complete agency background checks, which may include but not be limited to Criminal Justice Information and State and Federal background checks.

Some of the primary duties and responsibilities include:

• Configure and deploy VPC environments and cloud instances as designed by the Cloud Architect to meet the needs across all hosted workloads
• Evaluate and collaborate with NetSecOps team to establish security controls necessary to meet policy and standards from the CISO, ideally in a templated and automated manner
• Analyze and recommend new GCP capabilities for consideration for adoption
• Manage users/orgs/groups/access within the cloud platform, based on requirements defined by IAM team
• Create monitoring and reporting capabilities to meet management needs of cloud platform
• Define and document standards and procedures (SOPs) for consumption of IaaS (via IaC), PaaS, and SaaS on GCP
• Communicate/advocate capabilities of the cloud platform to drive adoption
• Act as Tier-2 escalation point for on-call/break-fix efforts, to diagnose and resolve incidents and problems with cloud-based systems
• Work with NetSecOps resources to ensure network security policy is established in a consistent, repeatable and automated manner

MINIMUM QUALIFICATIONS:

• At least five (5) years of infrastructure development experience with hands-on experience with GCP foundation services related to computing, network, storage, content delivery, administration and security, deployment and management, and automation technologies.
• At least five (5) years of Infrastructure as Code (IaC) experience in Terraform or similar.
• Deep domain expertise in cloud infrastructure solutions (i.e. Windows and Linux IaaS, Business Continuity and Disaster Recovery, Security, Management, Storage, Networking, OSS, containers, and Infrastructure as code technology), breadth of technical experience, and technical aptitude to learn and adjust to new technologies and cloud trends required.
• Experience and understanding of large-scale infrastructure deployments in enterprise-wide environments are required.
• Experience with automated Continuous Integration/Delivery
• Scripting skills in Python, Bash, and PowerShell
• Google Foundational certification

PREFERRED QUALIFICATIONS:

• Professional Cloud Architect certification
• Experience with Terraform
• Experience with Azure DevOps