Cloud Platform Engineer (GCP)

Job summary

You will design and implement secure, compliant GCP infrastructure, identity, and networking controls to support enterprise-scale production and AI workloads. Additionally, you will codify infrastructure and CI/CD pipelines while collaborating with cross-functional teams to ensure audit-ready platform delivery.

Job details

Position Overview Role Title: Senior GCP Platform Enablement Engineer Company: OpsGuru (Cloud Consultancy) Industry: Financial Services Engagement Type: Contract (Independent Contractor) Workload: Full-Time (40 hours/week) Duration: 14–16 weeks (with potential for extension) Location: Canada (Onshore) — Must be located and legally eligible to work in Canada Budget: CAD 85/h to CAD 110/h depending on seniority About OpsGuru & The Project OpsGuru is a cloud consultancy that helps enterprises design, build, secure, and operate modern platforms on major public clouds. Our teams combine deep engineering capability with the governance discipline demanded by highly regulated environments. In this role, you will join an OpsGuru delivery team on a Google Cloud Platform (GCP) enablement project for a Canadian financial services client. You will build the secure, compliant GCP foundation required to host production and AI workloads. Role Summary As a Senior GCP Platform Enablement Engineer, you will design and implement infrastructure, identity, networking, and security controls that enable safe, enterprise-scale adoption of cloud services. You will codify all infrastructure, CI/CD pipelines, policies, and compliance guardrails to deliver a repeatable, auditable platform ready for regulatory oversight. You will collaborate closely with the client's Security, IAM, Networking, Architecture, and Operations teams to translate business requirements into working platform capabilities, concluding with complete documentation and knowledge transfer. Key Responsibilities Infrastructure as Code (IaC): Design, build, and maintain modular, reusable Terraform modules for GCP organization, folder, project, and service resources. CI/CD Automation: Develop pipelines that plan, test, scan, and deploy infrastructure and policy changes with approval gates and audit trails. Identity & Access Management (IAM): Implement IAM, RBAC, and least-privilege models, including service account lifecycles, Workload Identity, and privileged access patterns. Enterprise Networking: Build and secure VPCs (including Shared VPCs), firewall policies, Cloud DNS, and private connectivity (Private Service Connect, Interconnect, VPN). Security Hardening: Apply STIG and/or CIS benchmarks and implement enterprise security controls across the platform and its services. Policy & Compliance as Code: Define and enforce guardrails using GCP Organization Policy, OPA/Rego, Terraform policy checks, or equivalent tooling to provide audit-ready evidence. Service Enablement: Onboard enterprise cloud and platform services into production along with the controls, patterns, and runbooks needed for safe consumption. Stakeholder Collaboration & Handover: Facilitate design sessions, present technical decisions, and deliver comprehensive documentation and training to customer teams. Required Qualifications & Experience Terraform & IaC: Proven hands-on experience structuring modular Terraform within enterprise GCP environments. CI/CD: Experience building automation pipelines for infrastructure delivery and testing. IAM & Security: Strong grasp of GCP IAM, RBAC, service account management, and security controls. Networking: Expertise in GCP enterprise networking (Shared VPCs, firewalls, Cloud DNS, Private Service Connect/Interconnect/VPN). Compliance Standards: Hands-on experience implementing STIG and/or CIS benchmarks. Policy/Compliance as Code: Experience enforcing platform guardrails programmatically (OPA/Rego, Org Policy, Terraform policy checks). Production Enablement: Track record of enabling cloud platform services in enterprise production environments. Cross-Functional Collaboration: Ability to partner effectively with Security, IAM, Networking, Architecture, and Operations teams. Communication: Excellent technical writing and stakeholder management skills. Nice-to-Have Skills Experience with Gemini Enterprise implementation or enablement. Google Cloud Professional Cloud Architect certification. Experience in banking, financial services, or other highly regulated environments. Experience supporting enterprise Governance, Risk, and Compliance (GRC) processes. Experience onboarding AI services into enterprise environments. Additional Engagement Details Background Check: Successful candidates may be required to complete background and security checks prior to onboarding due to financial services compliance requirements.

What you’ll do

You will design and implement secure, compliant GCP infrastructure, identity, and networking controls to support enterprise-scale production and AI workloads. Additionally, you will codify infrastructure and CI/CD pipelines while collaborating with cross-functional teams to ensure audit-ready platform delivery.

Requirements

The role requires extensive hands-on experience with Terraform, GCP enterprise networking, and security hardening benchmarks like STIG or CIS. Candidates must also possess strong skills in CI/CD automation, IAM, and policy-as-code frameworks within highly regulated environments.

Listed skills

• Terraform · Preferred
• Google Cloud · Preferred
• CI/CD · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Terraform
• GCP
• Infrastructure as Code
• CI/CD
• IAM
• RBAC
• Enterprise Networking
• Shared VPCs
• Security Hardening
• STIG
• CIS Benchmarks
• Policy as Code
• OPA
• Rego
• Cloud DNS
• Private Service Connect
• Google Gemini
• Client Security
• Cross-Functional Collaboration
• Regulatory Oversight
• Cloud Services
• Google Professional Cloud Architect
• Policy Compliance
• Google Cloud Platform (GCP)
• Infrastructure as Code (IaC)
• Knowledge Transfer
• Account Management
• Auditing
• Automation
• Banking
• Building Management System
• Business Requirements
• Communication
• Security Controls
• Enterprise Security
• Financial Services
• Firewall
• Governance
• Governance Risk Management And Compliance
• Identity And Access Management
• Virtual Private Networks (VPN)
• Operations
• Public Cloud
• Role-Based Access Control (RBAC)
• Stakeholder Management
• Technical Writing
• Tooling
• Hardening

Job areas

• Technology
• Software
• Consulting
• Engineering
• Security & Safety
• Cloud Platform Engineer
• Platform Engineer
• Software and Applications Developers and Analysts Not Elsewhere Classified
• Validation Engineers
• Industrial Engineers

More jobs from OpsGuru