Senior DevOps Engineer (Google Cloud Platform)

We are seeking an execution-driven and technically seasoned Senior Cloud Engineer with a strong focus on Google Cloud Platform (GCP), infrastructure automation, and security-first cloud architecture. As the primary GCP specialist within an experienced CloudOps team, you will partner closely with multi-cloud engineers while owning the design, operation, and evolution of our GCP environments. This role is ideal for someone with 5+ years of experience designing and operating cloud-native platforms in production, implementing scalable networking strategies, and hardening environments through thoughtful IAM and security controls. You will play a key role in building reliable, secure, and observable systems that support mission-critical workloads.

This is a fully remote role (based in the US or Canada), with occasional travel (1–2 times per year) for in-person collaboration, covered by NMI. If you live near a company office, occasional in-person collaboration is encouraged.

The Ideal Candidate

• Has a proven track record implementing low-toil, infrastructure as code cloud infrastructure on GCP
• Builds secure-by-default environments with strong IAM design, least privilege, and guardrails
• Understands GCP networking deeply, including shared VPC design, segmentation, routing, and private connectivity patterns
• Is comfortable operating production systems with an observability-first mindset
• Enjoys cross-functional collaboration with distributed teams across infrastructure, engineering, and security
• Can lead technical initiatives end-to-end while remaining hands-on
• Ideally has experience with BigQuery and Bigtable in production environments

Key Responsibilities

Cloud Infrastructure & Reliability:

• Design, implement, and operate production GCP infrastructure with high availability, scalability, and resilience
• Ensure high reliability and performance of services, proactively resolving issues before customer impact
• Participate in on-call rotations and drive post-incident reviews and blameless post-mortems
• Collaborate with other engineers to ensure cross-cloud consistency in areas such as IAM philosophy, tagging, observability standards, Terraform patterns, and security controls.

IAM & Security Implementation:

• Design and maintain IAM strategies (least privilege, service accounts, role design, separation of duties)
• Implement and operationalize security controls such as organization policies, audit logging, and key management
• Partner with security teams to meet compliance requirements and improve cloud security posture

Networking Strategy & Architecture:

• Architect GCP networking patterns including VPCs, shared VPCs, firewall policies, routing, load balancing, and private service access
• Drive secure connectivity patterns between services and environments (prod/non-prod), including hybrid connectivity where applicable
• Troubleshoot complex network and connectivity issues across cloud services

Automation & Tooling:

• Lead automation initiatives for provisioning and operational tasks using infrastructure-as-code and CI/CD pipelines
• Build and maintain tooling and standards for observability (metrics, logs, traces, dashboards, and alerting)
• Continuously improve developer experience through reusable modules, templates, and documentation

Data Platform Enablement (Preferred):

• Support and optimize cloud data services such as BigQuery and BigTable, including security, access patterns, and performance considerations
• Collaborate with engineering and analytics stakeholders on scalable data workflows and governance

Qualifications & Experience

Required:

• 5+ years in cloud engineering, SRE, DevOps, or infrastructure engineering roles with significant GCP experience
• Strong hands-on experience with GCP IAM, including service accounts, custom roles, and least privilege design
• Strong understanding of GCP networking, including VPC design, routing, firewalling, load balancing, and private connectivity patterns
• Experience implementing cloud security controls and best practices (logging, encryption, key management, policy guardrails)
• Proficiency in infrastructure-as-code and automation (Terraform strongly preferred) and scripting (Python, Bash, or Go)
• Experience operating production environments with strong troubleshooting skills and an observability mindset

Preferred:

• Experience with BigQuery and Bigtable (security, access management, performance tuni