Position: Google Cloud Platform Platform Engineer (Infrastructure)
Location: Phoenix, AZ (Hybrid 3 days in office)
Years of Exp: 12
Skills: Cloud Networking, AI, Go, GKE
Job Description
Hands-on Google Cloud Platform Platform Engineer to own and operate the Google Cloud environment — managing infrastructure-as-code, GKE cluster ingress and orchestration, platform security, and owning Google Cloud Platform onboarding and access for application teams.
Responsibilities
• Own the Terraform IaC codebase — reusable, version-controlled modules (Git workflows, PR reviews, releases), remote state, and CI/CD-driven infrastructure pipelines.
• Design and manage GKE cluster ingress end to end — Google Cloud Load Balancing, Ingress/Gateway API, NGINX or similar controllers, TLS/certificate management, Cloud DNS, and multi-cluster traffic routing.
• Operate GKE clusters — workload orchestration, autoscaling, upgrades, and troubleshooting.
• Implement Google Cloud Platform security controls — IAM, org policies, VPC Service Controls, workload identity, secrets management.
• Own Google Cloud Platform onboarding: project provisioning, access grants and audits, guardrails for new teams and workloads.
• Build Golang automation for provisioning, access workflows, and platform operations.
Required Skills
• 5+ years in cloud/platform engineering with strong Google Cloud Platform depth.
• Proven, hands-on Kubernetes ingress experience — configuring and troubleshooting ingress controllers, load balancers, routing rules, TLS termination, and DNS in production GKE.
• Expert Terraform with disciplined version control (branching, module versioning, code reviews).
• Strong Google Cloud Platform security fundamentals — IAM, least-privilege design, network security.
• Experience owning cloud onboarding / access management processes.
• Golang proficiency for automation and tooling.
Nice to Have
• Google Cloud Platform Professional Cloud Architect or Security Engineer certification; CKA.
• Service mesh experience (Istio / Anthos Service Mesh).
• Policy-as-code (OPA / Sentinel); Config Connector or Crossplane.
• Platform engineering / IDP exposure (e.g., Backstage).