Cloud Platform Engineer

Mission The project focuses on building, modernizing, and continuously improving a large-scale GCP cloud platform supporting business-critical applications across E-commerce, Software Engineering, and Data & AI. Key areas include enhancing GCP infrastructure and landing zones, managing and optimizing GKE/Kubernetes and Cloud Run environments, automating infrastructure with Terraform, and improving GitLab CI/CD pipelines. A strong emphasis is placed on cloud networking, IAM, secrets management, security, GitOps, and observability, ensuring a secure, scalable, and reliable cloud ecosystem.

This is a hands-on engineering project focused on platform evolution, automation, and architectural improvements, rather than traditional cloud maintenance and operations.

What you'll do

• Building, operating and further developing the product team-owned infrastructure on the GCP platform
• Implement and maintain infrastructure with Terraform (using centrally managed modules and pipelines)
• Building and Operating CI/CD Pipelines for Applications (GitLab CI/CD)
• Integration and use of core platform components (e.g., logging, secrets, IAM, VPC, DNS)
• Application of secure defaults (IAM, secrets, network, TLS, policies)
• Support in day-to-day operations (e.g. incident response, infrastructure maintenance, performance analysis)
• Collaborate with all other platform teams (e.g., to use/improve shared Terraform modules and policies)

What you need to be successful

• Our main Tech stack is Google Cloud Platform (GKE, Cloud Run, IAM, VPC, Load Balancing, DNS, Secret Manager), Terraform, GitLab CI/CD, Kubernetes, Helm, GitOps (Flux),Flagger, Observability (Datadog or GCP Monitoring)
• GCP landing zone expertise: Talent has in the past set up a GCP or AWS landing zone (or reworked, extended on)
• Kubernetes on GCP and AWS: Talent has configured, managed and improved GKE or EKS setups
• Cloud Run and Cloud Functions: Talent knows cloud-native options as well as related challenges & chances
• Secret and credential management: Talent has integrated Google Cloud Secret Manager (or AWS Secret Manager) in a bigger company / mid-to-large-scale-company setup
• Cloud Network: Talent has either set up or reworked a Cloud network (GCP and/or AWS)
• Artifact Registry: Talent has implemented Google Artifact Registry or AWS CodeArtifact in a bigger company / mid-to-large-scale-company setup
• GitLab: Talent knows a cross-environment GitLab runner setup. Talent migrated use cases to GitLab component (or GitHub actions).
• Terraform: Experience in the productive use of Terraform (modular repositories, environments, Plan/Apply in CI/CD)

Nice to have

• Management of Kubernetes resources (e.g. deployments, RBAC, network, policies, upgrades) and Helm releases