Job Summary (Terraform / DevOps Engineer GCP Infrastructure as Code)
- Own the design, implementation, and operation of all GCP infrastructure for a greenfield data platform (development, QA/UAT, production environments).
- Build and manage all cloud resources and data governance (storage, datasets, permissions, container services, orchestration) using Terraform exclusively; no manual resource creation.
- Design and implement the platform's security and IAM model, including custom roles, service accounts, workload identity federation, and least-privilege access.
- Develop and maintain a CI/CD pipeline for infrastructure as code, ensuring controlled, gated deployments across all environments.
- Lead private networking setup for secure, on-premise connectivity (VPC, Private Service Connect, firewall rules, serverless connectors).
- Deliver comprehensive data governance as code, including BigQuery taxonomies, policy tags, column-level security, and dynamic data masking.
- Collaborate with client platform teams to manage organizational policy exceptions, project provisioning, and escalated IAM requests.
- Provide client-facing communication: explain design decisions, run working sessions, and represent the solution in architecture and security reviews.
- Set infrastructure standards and best practices (module structure, naming, promotion conventions), review team changes, and mentor other engineers.
- Produce thorough documentation and ensure effective knowledge transfer to enable the data engineering team's autonomy.
- Preferred: Experience in regulated environments (e.g., healthcare), BigQuery governance via Terraform, Storage Transfer Service as code, Dataform repo management, and automation scripting (Python/Go).
- Onsite role at US client location; not remote or offshore.