Senior Cloud Operations Engineer (Google Cloud Platform)

Job Summary

The Senior Cloud Operations Engineer (GCP) is responsible for operating, maintaining, and optimizing enterprise workloads running on Google Cloud Platform. The role ensures high availability, performance, security, and reliability of GCP services across production and non-production environments.

The engineer will work closely with Cloud Architecture, Cloud Security, Platform Engineering, and DevOps teams to support GCP infrastructure, enforce governance, and enable cloud-native operations aligned with best practices.

Key Responsibilities

1. GCP Cloud Operations

• Operate and support day-to-day activities on GCP workloads across Compute Engine, GKE, Cloud SQL, Storage, and Load Balancing.
• Manage production environments, resolve incidents, and ensure uptime through SLO/SLA alignment.
• Implement OS-Login, IAP, VPC-SC, and secure connectivity for internal and external users.
• Monitor system health using Cloud Logging, Cloud Monitoring, and Error Reporting.

2. GCP Infrastructure Management

• Manage Compute Engine instances, instance templates, MIGs, custom images, and snapshots.
• Administer GKE clusters, node pools, autoscaling, Ingress/LB configurations, and GCR/Artifact Registry.
• Configure Cloud Load Balancers (External/Internal HTTP(S), TCP/UDP, SSL proxy).
• Implement VPC design, subnets, Cloud NAT, firewall policies, routing, Private Service Connect, and hybrid connectivity.

3. Automation, IaC & CI/CD

• Develop, maintain, and version cloud resources using Terraform and Google’s Deployment Manager.
• Automate provisioning, patching, scaling, and maintenance tasks.
• Contribute to GitLab/Cloud Build pipelines for GCP deployments.
• Create runbooks, automation scripts (Bash/Python), and SOPs for repeated processes.

4. Cloud Security & Compliance (GCP Focused)

• Enforce least privilege using IAM, service accounts, workload identity, and custom roles.
• Support Cloud Security Command Center (SCC) findings remediation.
• Implement Binary Authorization, Shielded VMs, CMEK/CMK, network segmentation, and policy enforcement via Organization Policies.
• Support compliance activities aligned with NCA, CIS GCP Benchmarks, and ISO standards.

5. Incident & Problem Management

• Lead incident troubleshooting using GCP logging, LB logs, VPC Flow Logs, packet mirroring.
• Conduct root-cause analysis for GKE, network, IAM, and service-level issues.
• Improve observability through dashboards, alerts, and SLO-based monitoring.
• Participate in on-call rotations and perform emergency recovery operations.

6. Cost Optimization & Governance

• Utilize GCP Cost tools: Billing dashboards, Cost Insights, Quotas, and Budgets.
• Optimize resources via committed use discounts, instance rightsizing, autoscaling, and idle resource cleanup.
• Ensure adherence to cloud governance frameworks and tagging/labeling standards.

Requirements:
Education

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field.

Experience

• 5–8+ years of hands-on experience in cloud operations with at least 3 years dedicated to GCP.
• Strong background in Linux/Windows VM operations in GCP.
• Experience operating GKE-based applications or microservices.

Technical Requirements (GCP-Specialized)

Google Compute & VM Operations

• Expertise in Compute Engine, MIGs, instance templates, OS-Login, IAP-enabled access.
• Understanding of disk types, snapshots, custom images, and maintenance policies.

Networking

• Strong hands-on experience with VPC design, peering, Shared VPC, firewall rules, Cloud NAT, and Private Service Connect.
• Deep understanding of Google Load Balancers (External HTTP(S), Internal HTTP(S), SSL Proxy, TCP/UDP).

GKE & Container Services

• Experience managing GKE clusters, node pools, autoscaling, monitoring, and troubleshooting pods/service meshes.
• Familiarity with Anthos (optional).

Storage & Databases

• Strong knowledge of Cloud Storage, object lifecycle management, Cloud SQL, Memorystore, and related services.

Security (GCP Focused)

• Experience with:
• IAM design
• SCC findings
• VPC SC
• Binary Authorization
• Workload Identity
• KMS/CMEK
• Shielded VMs
• Security posture hardening (CIS, NCA, ISO)

Automation & DevOps

• Strong experience with Terraform (required).
• Experience with GitLab CI, Cloud Build, or Jenkins for GCP workloads.
• Strong scripting in Bash/Python.

Observability

• Proficiency with:
• Cloud Monitoring
• Cloud Logging
• Error Reporting
• VPC Flow Logs
• LB logs

Soft Skills

• Strong ownership and accountability mindset.
• Ability to diagnose complex cloud/network/security issues.
• Excellent communication and documentation skills.
• Ability to work in fast-paced, highly collaborative environments.
• Leadership in incident management.

Preferred Certifications

• Google Cloud Professional Cloud Engineer (required or in-progress).
• Google Professional DevOps Engineer.
• CKA/CKAD (for GKE experience).
• HashiCorp Terraform Associate.
• ITIL Foundation and ISO awareness.