GCP Cloud Foundations Engineer — Security & IaC (Remote)

Tessero; Brussel; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Tessero is seeking a GCP Cloud Engineer to build and operate secure cloud foundations for enterprise Agentic AI platforms, including GEAP. The role centers on Google Cloud infrastructure, security, networking, IaC, and observability to ensure reliable connections for managed, self-hosted, and external agents.

You will implement IAM, VPC controls, Terraform provisioning, policy-as-code, and robust observability with Cloud Trace/Logging/Monitoring, delivering scalable, compliant cloud foundations

Qualifications

• Experience with Google Cloud Platform (GCP) cloud infrastructure, security and networking.

Responsibilities

• Manage GCP IAM and identity solutions, including service accounts, custom roles, and Workload Identity Federation.
• Design and support cloud networking capabilities such as VPC Service Controls, Private Service Connect, and cross-cloud connectivity.
• Use Terraform to provision Agent Platform resources, Agent Gateway instances, and network policies via IaC; author IAM and governance policies.
• Implement observability solutions using Cloud Trace, Cloud Logging, and Cloud Monitoring; develop dashboards and topology views.
• Deliver and operate secure, automated, observable, and scalable GCP cloud foundations supporting GEAP and related enterprise Agentic AI platforms.
• Ensure reliable connectivity for managed, self-hosted, and external agents while complying with identity, networking, security, and governance requirements.

Skills

GCP

IAM

Terraform

Networking

CI/CD

Observability

Security

Policy as code

Workload Identity Federation

VPC Service Controls

Private Service Connect

Git

Tools

Terraform

Git

Job description

Tessero is seeking a GCP Cloud Engineer to build and operate secure cloud foundations for enterprise Agentic AI platforms, including GEAP. The role centers on Google Cloud infrastructure, security, networking, IaC, and observability to ensure reliable connections for managed, self-hosted, and external agents.

You will implement IAM, VPC controls, Terraform provisioning, policy-as-code, and robust observability with Cloud Trace/Logging/Monitoring, delivering scalable, compliant cloud foundations