GCP Cloud Engineer

TELUS Digital

About The Position

We are seeking a highly skilled and motivated GCP Cloud Systems Engineer to lead the design, deployment, and operational excellence of our Google Cloud Platform (GCP) environment. A key focus for this role will be to work with a transitional team of our legacy on-premises environment to a modern, cloud-native orchestration framework. The ideal candidate is a hybrid of a Systems Administrator and a DevOps Engineer— someone who is comfortable writing Terraform code, troubleshooting networking issues or migrating a legacy scheduler to Airflow and providing support.

Requirements

3–5+ years of professional experience managing production environments in Google Cloud Platform (GCP).
3–5 years of proven experience supporting the migration of on-premises batch scheduling systems to GCP Composer or Apache Airflow.
Proven expertise with Terraform for provisioning cloud resources.
Strong proficiency with Docker and Kubernetes (K8s).
Expert-level knowledge of Linux administration.
Deep understanding of TCP/IP, DNS, and Load Balancing.

Nice To Haves

GCP Professional Cloud Architect or Professional Data Engineer certification.
Experience with GitHub Actions, GitLab CI, or Google Cloud Build.
Proficiency in Python (specifically for Airflow/Composer DAG development).

Responsibilities

Design, build, and maintain scalable cloud infrastructure using Infrastructure as Code (IaC), primarily via Terraform.
Deploy and manage optimized Compute Engine’s, Google Kubernetes Engine (GKE) clusters, serverless options like Cloud Run or Cloud Functions.
Configure and maintain Virtual Private Clouds (VPCs), including subnetting, firewall rules, hybrid connectivity (VPN/Interconnect), Cloud Load Balancing, Certificate management, and Cloud DNS to ensure secure and efficient traffic flow.
Administer compute resources across Compute Engine, Cloud Run, and Cloud SQL.
Implement and assist in the management of a robust security posture using IAM roles and permissions, ensuring the principle of least privilege across all projects.
Manage secrets and sensitive configurations using GCP Secret Manager.
Manage Cloud Armor for DDoS protection and Identity-Aware Proxy (IAP) for secure administrative access.
Utilize Security Command Center to proactively identify and remediate vulnerabilities.
Manage and assist in our ability to ensure the environment meets industry standards such as SOC2.
Establish comprehensive monitoring and alerting frameworks using Google Cloud Observability.
Develop and test automated backup and disaster recovery strategies.
Perform regular system patching and image hardening.
Monitor cloud consumption and implement cost-saving measures (e.g., committed use discounts, right-sizing).
Establish billing alerts and resource labeling standards.
Lead the strategic migration of batch scheduling workloads from on-premises systems to GCP Composer / Apache Airflow.
Design and implement scalable, maintainable Directed Acyclic Graphs (DAGs) to automate complex data pipelines and batch jobs.
Analyze legacy batch schedules to identify opportunities for parallelization, optimization, and modernization in the cloud.
Manage the risk and execution of "cutover" events, ensuring zero data loss and minimal downtime during the transition from on-prem to GCP.
As this role is critical to the stability of our production environments, the successful candidate must be available for support during both standard business hours and non-business hours.
Participation in an on-call rotation.
Availability for emergency troubleshooting during weekends or overnight if a critical system failure occurs.
Scheduling maintenance windows and migration cutovers during off-peak hours.