22 days ago
Base Salary
$72k - $105k/yr
Responsibilities
- Design and operate Google Cloud resource hierarchies, organization policies, labels, projects, and tenant environments.
- Manage IAM roles, service accounts, Workload Identity Federation, short-lived credentials, and least-privilege reviews.
- Design and operate VPC networking, Private Google Access, Private Service Connect, firewall policies, and DNS.
- Implement VPC Service Controls, controlled egress, Cloud KMS encryption, Secret Manager, key rotation, DLP scanning, de-identification, audit logging, and retention controls.
- Operate Cloud Storage, BigQuery, Pub/Sub, Dataflow, Datastream, Spanner, and Spanner Graph data services.
- Operate Cloud Run, Artifact Registry, Cloud Build, Cloud Scheduler, and Workflows application services.
- Provide GCP infrastructure foundations for Databricks, including projects, networking, service accounts, and GCS buckets.
- Provision infrastructure with Terraform and manage CI/CD promotion gates, policy-as-code checks, and drift detection.
- Manage Cloud Run releases, including revisions, traffic splitting, rollback, and image hygiene.
- Own Cloud Logging, Cloud Monitoring, Cloud Trace, service-level objectives, alerting, runbooks, and incident response.
- Design disaster recovery and high availability strategies, including backups, regional and multi-region choices, and RPO/RTO targets.
- Manage FinOps activities including billing exports, budgets, alerts, labels, committed-use and reservation decisions, and per-tenant cost allocation.
- Support predictable latency, client isolation, compliance evidence, and technical delivery in client-facing consulting engagements.
Requirements
- 5+ years of cloud or platform engineering experience, including production Google Cloud experience.
- Deep knowledge of GCP IAM, VPC, Private Service Connect, VPC Service Controls, Cloud Run, BigQuery, Cloud Storage, Pub/Sub, and Cloud KMS.
- Experience with Terraform and CI/CD for cloud infrastructure.
- Experience with GCP security engineering, organization policy, audit logging, secrets management, CMEK, and Sensitive Data Protection.
- Experience designing observability with Cloud Monitoring, Cloud Logging, alerting, and service-level objectives.
- Strong scripting skills in Python or Bash and working SQL knowledge for BigQuery administration.
- Experience in regulated industries, preferably financial services, including data residency, consent frameworks, GLBA, Fair Lending, and UDAAP.
- Ability to work in client-facing consulting delivery contexts and translate business requirements into technical specifications.
- Preferred Google Cloud Professional certification such as Cloud Architect, Cloud Security Engineer, or Cloud DevOps Engineer.
- Preferred production experience with Spanner, Spanner Graph, Dataflow, and Datastream.
- Preferred experience deploying Databricks on GCP, including workspaces, networking, and Unity Catalog storage setup.
- Preferred experience with multi-tenant isolation, per-tenant cost allocation, clean rooms, privacy-preserving data exchange, LangSmith, or LangGraph.
Benefits
- Base benefits for regular full-time employees may include paid time off, company holidays, personal days, sick leave, medical, dental, vision or provincial healthcare coordination, retirement savings plans, life and disability insurance, and employee assistance programs.
- Paid time off ranges from 12 to 25 vacation days depending on employee grade, with benefits subject to local policy and eligibility.
Tech Stack
Categories
About Capgemini
Capgemini is a global IT services and consulting firm that delivers strategy, cloud, AI, software engineering, and managed services to large enterprises and public-sector clients. Founded in 1967 and headquartered in Paris, it is publicly traded on Euronext Paris and operates in 50+ countries. The group expanded its engineering capabilities by acquiring Altran in 2020, now operating as Capgemini Engineering.