Senior Cloud Platform Engineer

Senior Cloud Platform Engineer

Cloud Engineering owns the shared cloud platform: the GCP organization and Azure tenant, the landing zones, IAM and network baselines, the Terraform framework and module library, and the standards that govern them. This role exists to close the gap between the platform's existence and a product running reliably on it in production. You will embed with product and vendor delivery teams as their Cloud Engineering counterpart, from design through go-live and into steady-state operations. This position combines platform engineering with Site Reliability Engineering (SRE) practices to ensure products can deploy repeatably, recover from failure, and operate within defined security and compliance boundaries.

Key Responsibilities

• Serve as the embedded Cloud Engineering contact for assigned product teams and vendor delivery teams.
• Translate product and vendor requirements into cloud designs that fit published standards on GCP.
• Build the product's infrastructure as code in the product-owned Terraform repository, including project structure, IAM, database access, VPC, and pipelines.
• Stay with the team through first deployments to validate prerequisites, prove environment promotion, and fix defects.
• Provide operational support after go-live for issues related to access, connectivity, capacity, cost, and security findings.
• Review infrastructure code, pull requests, and architecture decision records against Cloud Engineering standards.
• Act as the cloud counterpart to external delivery partners, ensuring their designs align with security, network, and identity boundaries.
• Apply and tune security controls at the product boundary, such as VPC Service Controls, organization policies, and Identity-Aware Proxy.
• Convert repeated product shapes into reusable assets, contributing to the Terraform module library.
• Ensure all effort is traceable through Jira work items tied to the source product.

Required Qualifications

• 10+ years in a hands-on role such as cloud engineering, platform engineering, or solutions engineering supporting application teams.
• Experience with Google Cloud Platform, including projects, IAM, Shared VPC, Private Service Connect, Cloud DNS, Cloud Run, Cloud SQL, and Pub/Sub.
• Working knowledge of Microsoft Azure, including subscriptions, Entra ID, virtual networking, and Azure Firewall.
• Proficiency with Terraform, including authoring modules and managing remote state in CI workflows.
• Experience building CI/CD pipelines in Azure DevOps or Cloud Build with keyless authentication through Workload Identity Federation.
• Understanding of cloud networking and identity principles such as DNS, TLS, OAuth2/OIDC, and least-privilege design.
• Demonstrated ability to diagnose production issues using logs, audit trails, and IAM policy state.
• Experience working directly with product owners and application developers to gather requirements and create documentation.
• Strong written communication skills for creating design rationale, review findings, and handoff documents.
• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.

Preferred Qualifications

• Google Professional Cloud Architect or Microsoft Certified: Azure Solutions Architect Expert certification.
• Experience with VPC Service Controls, organization policy, and domain-restricted sharing on GCP.
• Experience consuming an API management platform like Apigee X from the workload side.
• Experience with GKE or other Kubernetes platforms.
• Experience with Pub/Sub, Kafka, or other event-driven integration on GCP.
• Experience as the cloud-side counterpart to a vendor-delivered platform.
• Familiarity with FinOps practices, including cost estimation and spend review.
• Experience operating within a Product, Agile, or DevSecOps framework.
• Exposure to supply chain, distribution, or logistics domains.