Senior GCP Platform Engineer

Context

We are building an enterprise-grade Agentic AI platform on Google Cloud Platform. The platform requires complex GKE configurations, VPC networking, and multi-project architecture. Currently, Nathan Booth is the sole infrastructure resource responsible for Dev, QA, and Production environments. Concurrent workstreams exceed single-person capacity, creating a high-risk gap in resources and skills (Risk R-005).

Missions

• Design and implement GCP infrastructure using Terraform, following infrastructure-as-code best practices
• Deploy and manage GKE clusters with multiple node pools, RBAC, and network policies
• Configure Shared VPC networking with proper subnet segmentation and firewall rules
• Implement Cloud SQL, Cloud Memorystore (Redis), and GCS for platform data services
• Integrate Secret Manager with Kubernetes via Secrets Store CSI Driver
• Configure Cloud Monitoring, Cloud Logging, and Cloud Trace for baseline observability
• Support use case teams with infrastructure requirements and troubleshooting
• Participate in production environment support

Tools & Environment

• Google Cloud Platform (GCP)
• Google Kubernetes Engine (GKE)
• Terraform (infrastructure-as-code)
• Shared VPC, Cloud NAT, firewall rules, Private Google Access
• Kubernetes RBAC, namespaces, resource quotas, network policies
• Cloud SQL, Cloud Memorystore, Google Cloud Storage (GCS)
• Secret Manager, Secrets Store CSI Driver
• Cloud Monitoring, Cloud Logging, Cloud Trace

Working Conditions

• Location: Remote (EU timezone preferred)
• Reports to: Infrastructure Lead (Nathan Booth)
• Timing: ASAP
• Criticality: High (reduces bandwidth and risk of resource/skill gaps)

1. 5+ years experience with Google Cloud Platform
2. Strong expertise in GKE (Google Kubernetes Engine) including networking, security, and scaling
3. Proficiency in Terraform for infrastructure-as-code
4. Experience with VPC design, Cloud NAT, firewall rules, and Private Google Access
5. Knowledge of Kubernetes RBAC, namespaces, resource quotas, and network policies
6. Familiarity with Cloud SQL, Memorystore, and GCS administration
7. Understanding of GCP IAM, service accounts, and Workload Identity
8. Experience with Cloud Monitoring and Cloud Logging
9. Desirable: Experience with VPC Service Controls and organisation policy constraints
10. Desirable: Knowledge of Binary Authorization and container security
11. Desirable: Familiarity with Artifact Registry and vulnerability scanning
12. Desirable: Experience in multi-tenant Kubernetes environments
13. Desirable: Background in AI/ML platform infrastructure