Cloud Engineer (43453)

I am looking for a Cloud Engineer with strong GCP expertise and multi-cloud experience. You will design secure landing zones, implement governance policies, and build scalable environments across multiple clients. This role combines infrastructure engineering with cross-cloud architecture, requiring hands-on experience with Terraform, GitOps, and cloud security.

🚀 Project
- build and manage client-plane data environments in GCP (and Azure/AWS where required) connected to an existing Azure control plane
- design and implement secure-by-default landing zones and tenant onboarding patterns
- define and enforce organization policies and guardrails separating management access from data access
- deliver infrastructure using Infrastructure-as-Code (Terraform) and GitOps (Flux)
- implement cross-cloud, cross-tenant management patterns including integration with Azure Lighthouse and GCP IAM/resource hierarchy
- implement cross-cloud telemetry with metadata-only logging to prevent data exfiltration
- define client prerequisites in networking, security, and landing zone setup
- support incident response, upgrades, and versioning across environments

🎯 Skills
- strong hands-on experience with GCP (resource hierarchy, Organization Policy Service, IAM, VPC Service Controls, GKE)
- experience with multi-tenant / multi-client deployments across isolated environments
- knowledge of multi-cloud and hybrid architectures (control-plane vs data-plane separation)
- expertise in policy and guardrail design for secure access control
- strong experience with Terraform (modules, state management, multi-environment setups)
- experience with GitOps and CI/CD (Flux or similar tools)
- working knowledge of Azure (management groups, Azure Policy, Azure Lighthouse)
- understanding of data residency and regulatory requirements

💡 Nice to have
- experience with AWS (Organizations, Control Tower, SCPs)
- knowledge of observability tools (Grafana, Telegraf, Prometheus)
- experience with encryption and key management (Cloud KMS, Key Vault, CMEK/CMK)
- experience with GenAI or RAG workloads
- background in financial services or regulated environments
- relevant certifications (GCP Professional Cloud Architect / DevOps Engineer)