Specialist - Software Engineering

About the role

Role Description Infrastructure Overview Landing Zone and Network Foundation GCP folders and projects VPCs, subnets, and Shared VPC Network Connectivity Center spokes and routes Cloud Router, Cloud NAT, firewall rules, and DNS policies IP reservations, load-balancer components, and Private Service Connect Root and intermediate certificate authorities Logging sinks, organization-policy overrides, and foundational IAM Security and Encryption Cloud KMS key rings and keys, including CMEK and HSM-backed encryption KMS IAM permissions Secret Manager Service accounts and IAM roles Cross-project secret synchronization into GKE using the External Secrets Operator Kubernetes and Compute GKE clusters provisioned within landing-zone VPCs and subnets Compute Engine virtual machines and persistent disks Cloud Functions Data and Analytics BigQuery datasets, tables, views, scheduled queries, and stored procedures Cloud Composer and Apache Airflow Dataflow Databases and Data Stores Cloud SQL for PostgreSQL and MySQL Cloud Spanner Memorystore for Redis MongoDB Atlas through private connectivity Cassandra on GCP virtual machines, provisioned with Terraform and Ansible Supporting network infrastructure for Oracle Database@Google Cloud Messaging and Eventing Pub/Sub Confluent Kafka, including private connectivity through Private Service Connect DNS-related automation and diagnostics Artifact Management Artifact Registry supports Docker, Maven, and npm repositories. Networking Utilities Cloud DNS is supported by automated connectivity and DNS diagnostics, including nslookup, curl, and Kafka Private Service Connect checks. Infrastructure State and Project Onboarding GCS-based Terraform state buckets Project-onboarding automation for required APIs and baseline IAM Application Lifecycle GCP Landing Zone → GKE Cluster → Data, Messaging, and Supporting GCP Resources → GitOps/CD → Applications and Microservices The landing-zone automation establishes where the workload will run, including the project, VPC, subnet, encryption, and connectivity foundations. Resource-creation automation then provisions the services the application requires, such as databases, BigQuery, Kafka, Pub/Sub, Redis, secrets, and other managed services. Finally, the GitOps/CD layer deploys application workloads to GKE, where they consume the provisioned platform services. Cloud Governance Focus Cloud governance is an additional area where the team is actively seeking support. FinOps and cloud cost management are currently handled by a separate team, so the immediate priority is not to build new FinOps capabilities. Instead, the team aims to establish a stronger governance model across the platform, with particular focus on: IAM and access management Active Directory group-based access Role design and least-privilege controls User onboarding and offboarding Service-account governance Periodic access reviews Overall identity governance within GCP

Benefits

• Comprehensive Medical Plan Covering Medical, Dental, Vision
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

Pay

Actual compensation within the range will be dependent upon the individual's skills, experience, performance and internal equity. The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation.