Cloud Engineer

Tessero; Brussel; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Tessero is seeking a GCP Cloud Engineer to build and operate secure cloud foundations for enterprise Agentic AI platforms, including GEAP. The role centers on Google Cloud infrastructure, security, networking, IaC, and observability to ensure reliable connections for managed, self-hosted, and external agents.

You will implement IAM, VPC controls, Terraform provisioning, policy-as-code, and robust observability with Cloud Trace/Logging/Monitoring, delivering scalable, compliant cloud foundations

Qualifications

• Experience with Google Cloud Platform (GCP) cloud infrastructure, security and networking.

Responsibilities

• Manage GCP IAM and identity solutions, including service accounts, custom roles, and Workload Identity Federation.
• Design and support cloud networking capabilities such as VPC Service Controls, Private Service Connect, and cross-cloud connectivity.
• Use Terraform to provision Agent Platform resources, Agent Gateway instances, and network policies via IaC; author IAM and governance policies.
• Implement observability solutions using Cloud Trace, Cloud Logging, and Cloud Monitoring; develop dashboards and topology views.
• Deliver and operate secure, automated, observable, and scalable GCP cloud foundations supporting GEAP and related enterprise Agentic AI platforms.
• Ensure reliable connectivity for managed, self-hosted, and external agents while complying with identity, networking, security, and governance requirements.

Skills

GCP

IAM

Terraform

Networking

CI/CD

Observability

Security

Policy as code

Workload Identity Federation

VPC Service Controls

Private Service Connect

Git

Tools

Terraform

Git

Job description

• A GCP Cloud Engineer is required to build and operate secure cloud foundations for enterprise Agentic AI platforms, including GEAP.
• The role focuses on Google Cloud infrastructure, security, networking, Infrastructure as Code, and observability, ensuring that managed, self-hosted, and external agents can connect reliably while meeting enterprise identity, security, networking, and governance standards.
• Contract Type: B2B cooperation. This opportunity is available only to candidates operating through their own s.r.o. (limited company).
• Start Date: 16.11.2026 (an earlier start may be possible).
• End Date: 31.12.2026, with the possibility of extension. The engagement is expected to continue for at least Q1 2027.
• Work Setup: Remote-friendly. The role is primarily remote, with occasional office visits approximately once per month.

Key Responsibilities

• The position involves managing GCP IAM and identity solutions, including service accounts, custom IAM roles, and Workload Identity Federation to establish secure trust relationships between GCP and non-GCP workloads without relying on long-lived credentials.
• Responsibilities also include designing and supporting cloud networking capabilities such as VPC Service Controls, Private Service Connect, and cross-cloud connectivity patterns.
• The successful candidate will use Terraform to provision Agent Platform resources, Agent Gateway instances, and network policies through Infrastructure as Code practices. The role also includes authoring and testing IAM and semantic governance policies, ideally following a policy-as-code approach.
• A key part of the position is implementing and maintaining observability solutions using Cloud Trace, Cloud Logging, and Cloud Monitoring, including the development of dashboards and topology views across managed, self-hosted, and external agents.
• The expected outcome is the delivery and operation of secure, automated, observable, and scalable GCP cloud foundations supporting GEAP and related enterprise Agentic AI platforms.
• The environment must enable reliable connectivity for managed, self-hosted, and external agents while maintaining compliance with enterprise identity, networking, security, and governance requirements.

Required Experience and Skills

• Strong experience with Google Cloud Platform (GCP), including cloud infrastructure, security, and networking.
• Hands-on expertise with IAM, service accounts, custom roles, Workload Identity Federation, VPC Service Controls, and Private Service Connect.
• Experience with Terraform and Infrastructure as Code methodologies.
• Knowledge of policy-as-code approaches and governance policy authoring.
• Experience with observability tooling, including Cloud Trace, Cloud Logging, and Cloud Monitoring.
• Good understanding of Git and CI/CD practices.
• Experience with cloud security and enterprise integration.

Nice to Have

• Experience working with enterprise Agentic AI platforms and related cloud foundations.