Services & Data Infrastructure Engineer

Knoldus; Hyderabad; Hybrid; INR 2,000,000 - 3,200,000; Full time

Job summary

Knoldus is seeking a highly autonomous Platform/Data Engineer to own GCP administration, Terraform-driven IaC, and secure multi-tenant cloud deployments. You will provision projects, enforce governance, and deploy services via GKE or Cloud Run while maintaining robust monitoring and security controls.

The role emphasizes global data management, IAM governance, and scalable database provisioning across BigTable and BigQuery. Strong scripting skills and independent execution are essential.

Qualifications

• 5+ years in DevOps/SRE/Platform/Data Infrastructure with cloud deployment focus.
• Strong GCP administration experience at org/folder/project levels.
• Deep IAM, service accounts, secret management, and KMS knowledge.

Responsibilities

• GCP Project Provisioning & Landing Zones: automate provisioning and lifecycle for new projects with standard landing zones.
• Organization Hierarchy & Governance: manage folders, projects, billing and enforce org policies.
• Infrastructure as Code (IaC): design and manage Terraform configurations for all GCP resources.
• Service Deployment & Orchestration: deploy and manage services via GKE, Cloud Run, or instance templates.
• CI/CD Pipeline Automation: build/maintain pipelines for safe, zero-downtime deployments.
• Monitoring, Alerting & Observability: set up dashboards with Stackdriver, Prometheus, or Grafana.
• Multi-Region Data Management & Global Compliance: architect and maintain globally distributed databases with data sovereignty.
• IAM & Security Governance: enforce least-privilege, manage groups, secrets, and security policies.
• Database Provisioning & Management: deploy and tune Postgres/NoSQL (BigTable) and BigQuery schemas.
• Autonomous Execution: work independently from requirements to production, with minimal supervision.
• Technical Ownership: document network/topology, DR plans, and root-cause analysis.

Skills

GCP administration

Terraform IaC

Cloud security

SRE/DevOps

Python

Education

Bachelor’s degree in Computer Science/Software Engineering or related

Tools

Terraform

Docker

GKE

Cloud Run

GitHub Actions

Job description

We are a Microsoft Gold Partner and a Great Place to Work-certified company. \"Happy Team Members, Happy Clients\" is a principle we hold dear. We are an international IT consulting and software services firm committed to providing. Cutting-edge services and products that satisfy our clients' global needs. Our company was established in 2005, and since then we've expanded our team by including more than 350+ Talented skilled software professionals. Our clients come from the United States, Canada, Europe, Australia, the Middle East, and India, and we create and design IT solutions for them. If you need any more details, you can get them at https://www.beyondkey.com/about.

Role Summary:

This role sits at the intersection of Platform and Data Engineering. You will be the primary custodian of our GCP environments, responsible for deploying, orchestrating, and securing not only our databases, but also the software systems and microservices that interface with them.

Additionally, you will serve as our core GCP administrator, owning the full lifecycle of our cloud footprint. This includes provisioning new GCP projects, defining organizational hierarchies, and establishing enterprise-grade security and permission boundaries.

This is a highly autonomous, self-managed role. We need an engineer who requires very little day-to-day management—someone who can architect infrastructure, write the necessary Terraform automation, secure the network perimeter, and safely deploy production-grade software services, data platforms, and secure multi-tenant GCP environments.

Key Responsibilities

GCP Tenant Administration, Software & Service Deployment (Primary Focus)

• GCP Project Provisioning & Landing Zones: Own the end-to-end provisioning and lifecycle management of all new GCP projects. Establish, automate, and document standard \"landing zones\" (VPCs, Shared VPCs, logging buckets, and default security guardrails) for new application environments.
• Organization Hierarchy & Governance: Manage the GCP Organization structure (Folders, Projects, Billing Account linkages) and implement Organization-level policies to prevent misconfiguration or unauthorized resource exposure.
• Infrastructure as Code (IaC): Own the end-to-end design, implementation, and management of Terraform configurations to provision and manage all GCP resources (Projects, Compute Engine, GKE, Cloud Run, VPCs, IAM, Cloud Storage, and data systems) in a repeatable and modular manner.
• Service Deployment & Orchestration: Package, deploy, and manage containerized software services and systems. Optimize workload deployments using Google Kubernetes Engine (GKE), Cloud Run, or instance templates, ensuring robust health checking, service discovery, and logging.
• CI/CD Pipeline Automation: Build and maintain automated deployment pipelines (GitHub Actions, Cloud Build, or similar) to support safe, zero-downtime rollouts of software services, infrastructure updates, and database schema migrations.
• Monitoring, Alerting & Observability: Implement comprehensive observability dashboards (using GCP Operations Suite/Stackdriver, Prometheus, or Grafana) to monitor system performance, application logs, service health, and infrastructure costs.

Data Systems Engineering & Security (Co-Focus)

• Multi-Region Data Management & Global Compliance: As a worldwide organization, managing multi-region data architecture is a critical part of this role. You will architect, deploy, and maintain globally distributed databases while ensuring strict adherence to global security standards, data sovereignty laws, and regional data residency requirements.
• Identity Access Management (IAM) & Security Governance: Enforce strict security boundaries across all projects, services, and data systems. Define, manage, and audit Google Group-based memberships, apply least-privilege IAM policies, configure service accounts, manage secret distribution (using GCP Secret Manager), and manage security policies (KMS encryption keys, VPC Service Controls).
• Database Provisioning & Management: Plan, deploy, and configure high-performing databases across various paradigms to support our transactional and analytical workloads:
• Highly scalable, low-latency NoSQL systems in GCP BigTable .
• Enterprise analytical data warehouse environments in GCP BigQuery .
• Database Performance & Optimization: Manage schema migrations, create optimized table definitions, establish indexing/partitioning strategies, and tune queries to ensure cost-efficient performance at scale.
• Autonomous Execution: Act as a self-directed engineering unit. Take broad product and architectural requirements, translate them into technical implementation plans, and execute deployments with minimal supervision.
• Technical Ownership: Maintain comprehensive documentation of GCP network topologies, service architecture, and database configurations. Establish disaster recovery (DR) plans and perform root-cause analysis on system or service failures.

Skills & Experience

Required:

• Work Experience: 5+ years of experience in DevOps, Site Reliability Engineering (SRE), Platform Engineering, or Data Infrastructure Engineering with a strong focus on cloud service deployment.
• GCP Cloud Ecosystem & Administration: Extensive experience deploying and managing production software services and environments in Google Cloud Platform (GCP) . Proven experience handling GCP Organization-level administration, folder structures, project billing setups, and resource hierarchy management.
• Identity & Access Control: Deep expertise with GCP IAM (Identity & Access Management) , Service Accounts, workload identity federation, and defining complex permission policies.
• Infrastructure as Code (IaC): Expert-level proficiency writing clean, modular, and plan-safe Terraform configurations to manage entire cloud footprints (including project creation and IAM policies via Terraform).
• Containers & Orchestration: Strong experience deploying application services using Docker and orchestrating them via Google Kubernetes Engine (GKE) or Cloud Run .
• Data Systems Deployment: Hands-on experience configuring, scaling, and securing:
• Postgres (operational/transactional environments).
• GCP BigTable (NoSQL / high-throughput IoT telemetry storage).
• GCP BigQuery (analytical data-warehousing and enterprise schemas).
• Cloud Security & Networking: Solid understanding of cloud security architectures including VPC design, service accounts, private service connections, firewalls, and Organization-level security guardrails.
• Programming & Automation: Fluency in SQL and Python (or Bash/Go) for scripting, system automation, and pipeline integration.
• Self-Direction: Demonstrated ability to manage workloads independently, prioritize tasks dynamically, and deliver production-grade systems with minimal management overhead.
• Education: Bachelor’s degree in computer science, Software Engineering, Information Systems, Mathematics, Statistics, or a related technical field (or equivalent practical experience).

Nice to Have:

• CI/CD Platforms: Advanced experience setting up complex deployment flows in GitHub Actions, GitLab CI, or Jenkins.
• Data Streaming & Pipelines: Experience with Pub/Sub, Kafka, or data pipelines (like Dataflow or Apache Beam) feeding into storage systems.

Compliance Frameworks:

Experience hardening infrastructure, IAM roles, and cloud services to meet SOC2, ISO 27001, or GDPR compliance.