Senior Infrastructure Engineer – GCP

Jobtailor

Greater London

On-site

GBP 110,000 - 150,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Jobtailor is seeking an expert Infrastructure Engineer to design, implement, and operate scalable, secure cloud infrastructure on GCP across multi-region deployments. You will automate, document, and continuously improve the platform while ensuring compliance with ISO 27001, SOC 2, PCI DSS, and 3DS.

You will lead complex projects, optimize cost and performance, and mentor teams in best practices for CI/CD, security, and observability using tools like Grafana, Cloud Monitoring, and Cloud Logging.

Qualifications

Proven GCP multi-region disaster recovery experience.
Experience bootstrapping Google Cloud Organisations, hardening with policies, and structuring enterprise resource hierarchies.
Experience with GCP services including GKE, Compute Engine, Network Connectivity Center, Cloud SQL, IAM, and VPC Service Controls.
Experience writing clean, modular Terraform code.
Experience with service-oriented architecture using containers, distributed systems, and immutable infrastructure.
Experience with GCP key and secret management using Cloud KMS, Cloud External Key Manager (EKM), and Secret Manager, including cryptographic key ceremonies.
Experience designing hybrid connectivity from GCP to co-located Payment HSMs using NCC, Cloud VPN, and Dedicated / Partner Interconnect.
Experience with Workload Identity and Workload Identity Federation for keyless workload and CI/CD authentication.
Experience with observability tooling including Cloud Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus, OpenTelemetry, and Grafana.
Experience setting up Google Workspace / Google Cloud Identity.
Experience automating with a scripting language such as Python or Go.
Experience implementing CI/CD pipelines.
Understanding of RESTful API and event-driven concepts.
Ability to write RFCs and ADRs through design, implementation, and production, with documented runbooks and operating models.

Responsibilities

Design, document, build, and maintain scalable infrastructure on GCP.
Ensure cloud environment performance and reliability while measuring cost-effectiveness.
Automate infrastructure and minimize manual implementation.
Build systems with security by design.
Maintain platform compliance with ISO 27001, SOC 2, PCI DSS, and 3DS.
Design and operate GCP key and secret management, including support for cryptographic key ceremonies.
Diagnose and fix client-reported infrastructure issues while maintaining security and performance.
Write technical documentation and host team training sessions.
Track new technologies and industry changes.
Lead complex infrastructure projects from inception through operations.
Shape Engine’s infrastructure approach, tooling, automation, and architecture.
Set a high technical standard through hands-on contributions.
Collaborate with engineering teams supporting a global, cloud-native banking platform across multiple regions and cloud providers.

Skills

GCP DR

Terraform

CI/CD

Observability

Python

Zero Trust

KMS

Cloud VPN

Networking

Security

REST API

SRE Practices

WA Workload Identity

GKE

Tools

GCP

Terraform

Cloud KMS

Cloud VPN

OpenTelemetry

Grafana

Cloud Monitoring

Cloud Logging

Google Workspace

Cloud SQL

VPC Service Controls

Job description

Design, document, build, and maintain scalable infrastructure on GCP
Ensure cloud environment performance and reliability while measuring cost-effectiveness
Automate infrastructure and minimize manual implementation
Build systems with security by design
Ensure platform compliance with ISO 27001, SOC 2, PCI DSS, and 3DS
Design and operate GCP key and secret management, including support for cryptographic key ceremonies
Diagnose and fix client-reported infrastructure issues while maintaining security and performance
Write technical documentation and host team training sessions
Track new technologies and industry changes
Lead complex infrastructure projects from inception through operations
Shape Engine’s infrastructure approach, tooling, automation, and architecture
Set a high technical standard through hands-on contributions
Collaborate with engineering teams supporting a global, cloud-native banking platform across multiple regions and cloud providers

Requirements

Proven GCP multi-region disaster recovery experience
Experience bootstrapping Google Cloud Organisations, hardening with policies, and structuring enterprise resource hierarchies
Experience with GCP services including GKE, Compute Engine, Network Connectivity Center, Cloud SQL, IAM, and VPC Service Controls
Experience writing clean, modular Terraform code
Experience with service-oriented architecture using containers, distributed systems, and immutable infrastructure
Experience with GCP key and secret management using Cloud KMS, Cloud External Key Manager (EKM), and Secret Manager, including cryptographic key ceremonies
Experience designing hybrid connectivity from GCP to co-located Payment HSMs using NCC, Cloud VPN, and Dedicated / Partner Interconnect
Experience with Workload Identity and Workload Identity Federation for keyless workload and CI/CD authentication
Experience with observability tooling including Cloud Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus, OpenTelemetry, and Grafana
Experience setting up Google Workspace / Google Cloud Identity
Experience automating with a scripting language such as Python or Go
Experience implementing CI/CD pipelines
Understanding of RESTful API and event-driven concepts
Ability to write RFCs and ADRs through design, implementation, and production, with documented runbooks and operating models
Ideally, experience with Zero Trust security, mTLS, and SSO
Ideally, experience with AWS
Ideally, familiarity with bash and Golang, Java, or Python development
Ideally, understanding of database monitoring, analysis, disaster recovery, and performance tuning
Ideally, understanding of networking and routing concepts including TCP/IP, VLANs, VPNs, and BGP
Awareness or ability to leverage Claude Skills during development
Aptitude for finding elegant solutions to difficult technical problems
Willingness to work within a collaborative, self-driven, ownership-oriented culture

Core Competencies

Demonstrates expertise in designing and maintaining scalable infrastructure on GCP, with a strong focus on security, compliance, and automation. Proficient in implementing disaster recovery strategies and managing GCP services while ensuring performance and cost-effectiveness.

Highest-signal resume keywords