DevOps Engineer

mGanik Group; Jakarta Pusat; On-site; IDR 240,000,000 - 360,000,000; Full time

Job summary

mGanik Group is seeking a DevOps Engineer (GCP) to own infrastructure design, CI/CD pipelines, and reliability across Google Cloud environments. You will implement secure, scalable systems using Terraform and manage GKE clusters, Cloud Run, Cloud Build, and related services. Strong emphasis on security, observability, and cost optimization.

You will mentor teams, maintain runbooks, and contribute to architecture decisions, with on-call responsibilities and RCA leadership as part of the role.

Qualifications

• 2+ years of hands-on DevOps or SRE experience on Google Cloud Platform.
• Advanced Terraform proficiency for production-scale infrastructure.
• Strong production experience with Kubernetes (GKE).
• Scripting skills in Python, Bash, or Go for automation.
• Deep understanding of GCP networking (VPCs, load balancing, DNS).
• Experience with GCP managed databases (Cloud SQL, BigQuery, Spanner).
• GCP certifications such as Professional Cloud DevOps Engineer / Architect / Security Engineer.
• Experience with observability stacks (Prometheus, Grafana, ELK, Splunk).
• Hands-on configuration management (Ansible, Chef, Puppet).
• Strong DevSecOps practices (SAST/DAST, container security).
• Problem solving, analytical thinking, and clear communication.
• Collaborative mindset with mentoring experience; cloud migration exposure.

Responsibilities

• Design, build, and maintain secure, scalable GCP infrastructure using Terraform as the primary IaC tool.
• Ensure consistent Dev, Staging, and Production environments via robust state management and best practices.
• Operate and optimize GKE clusters and compute services including Compute Engine and Cloud Run.
• Architect and manage end-to-end CI/CD pipelines (Cloud Build, Cloud Deploy, Jenkins, GitLab CI).
• Embed security scanning and compliance checks into pipelines to support DevSecOps culture.
• Implement observability frameworks across GCP using Cloud Monitoring, Prometheus, and Grafana.
• Define, track, and report SLIs/SLOs to balance reliability with delivery speed.
• Participate in on-call rotations and lead RCA for incidents; drive preventative improvements.
• Design and manage IAM policies following the principle of least privilege.
• Implement network security controls including VPC design, firewall rules, Cloud Armor, and encryption.
• Manage application secrets via Google Secret Manager or HashiCorp Vault.
• Monitor cloud spend and identify cost-optimisation opportunities without sacrificing performance.
• Mentor development teams on DevOps practices and GCP architecture.
• Maintain high-quality documentation including architecture diagrams and runbooks.

Skills

DevOps Engineer / SRE

Terraform

GKE / Kubernetes

Python

Bash

Go

DevSecOps

Cloud migration

FinOps on GCP

PostgreSQL on Cloud SQL / BigQuery /Sp

Tools

Terraform

GKE

Cloud Run

Cloud Build

Cloud Deploy

Jenkins

GitLab CI

Prometheus

Grafana

HashiCorp Vault

Cloud Monitoring

Cloud Logging

Security Command Centre

Cloud Armor

Ansible

Puppet

Job description

Were looking for a DevOps Engineer (GCP) who thrives at the intersection of automation, reliability, and cloud architecture . Youll play a critical role in shaping a secure, scalable, and highly available Google Cloud ecosystem , enabling engineering teams to ship faster and safer.

This is a hands‑on role with real ownership — from infrastructure design to production reliability — where your decisions directly impact system performance, cost efficiency, and developer velocity.

Key Responsibilities

• Design, build, and maintain secure, scalable, and fault‑tolerant GCP infrastructure using Terraform as the primary IaC tool.
• Ensure consistent Dev, Staging, and Production environments through robust Terraform state management and best practices.
• Operate and optimise Google Kubernetes Engine (GKE) clusters and core compute services including Compute Engine and Cloud Run .
• Architect and manage end‑to‑end CI/CD pipelines (Cloud Build, Cloud Deploy, Jenkins, GitLab CI) to automate testing, artefact creation, and deployments.
• Embed security scanning, compliance checks, and quality gates into pipelines to support a strong DevSecOps culture.
• Implement and maintain observability frameworks across GCP using Cloud Monitoring & Logging , Prometheus , and Grafana .
• Define, track, and report SLIs and SLOs to balance reliability with delivery speed.
• Participate in on‑call rotations , lead deep Root Cause Analysis (RCA) , and drive preventative improvements after incidents.
• Design and manage IAM policies following the principle of least privilege .
• Implement network security controls including VPC design, firewall rules, Cloud Armor , and encryption standards.
• Manage application secrets and credentials using Google Secret Manager or HashiCorp Vault .
• Proactively monitor cloud spend and identify cost‑optimisation opportunities without compromising performance.
• Perform capacity planning and performance tuning across GCP services.
• Mentor development teams on DevOps best practices and GCP architecture .
• Maintain high‑quality technical documentation, including architecture diagrams, runbooks, and operational procedures .

Requirements

• 2+ years experience as a DevOps Engineer or Site Reliability Engineer , with demonstrable hands‑on expertise in Google Cloud Platform .
• Advanced proficiency in Terraform for managing complex, production‑scale GCP infrastructure.
• Strong experience running Kubernetes in production , preferably GKE .
• Solid scripting skills in Python, Bash, or Go for automation and tooling.
• Deep understanding of GCP networking : VPCs, load balancing, peering, DNS, CDN, VPN/Interconnect.
• Experience managing GCP managed databases such as Cloud SQL, BigQuery, or Spanner .
• GCP Certifications , such as: Professional Cloud DevOps Engineer, Professional Cloud Architect, Professional Cloud Security Engineer
• Experience with advanced observability stacks (Prometheus, Grafana, ELK, Splunk).
• Hands‑on knowledge of configuration management (Ansible, Chef, Puppet).
• Strong understanding of DevSecOps practices (SAST, DAST, container vulnerability management).
• Exceptional problem‑solving and analytical thinking in high‑pressure environments.
• Clear, confident communication skills — able to translate complex technical topics for diverse stakeholders.
• A collaborative mindset with experience mentoring engineers and leading small technical initiatives.
• Proven experience with cloud migration projects (on‑prem or multi‑cloud to GCP).
• Strong exposure to serverless architectures (Cloud Run, Cloud Functions, App Engine).
• Hands‑on FinOps experience on GCP , using Billing Reports, Recommenders, or Cost Management APIs.
• Advanced database experience with PostgreSQL on Cloud SQL , Cloud Spanner , or BigQuery .
• Experience implementing advanced security controls using Security Command Centre (SCC) or Cloud Armor (WAF/DDoS protection) .