GCP DevOps Engineer – Senior

Lumenalta; Mexico; On-site; MXN 1,100,000 - 1,700,000; Full time

Job summary

Lumenalta is seeking a Senior GCP DevOps Engineer to build secure CI/CD pipelines, harden GCP infrastructure, and operate Vertex AI workloads across multi‑cloud and on‑prem environments.

The role focuses on designing secure pipelines, multi‑tenant Kubernetes, Terraform provisioning, and cost‑aware operations, with strong emphasis on security and compliance. Remote LATAM-friendly, rolling hiring.

Qualifications

• 7+ years of DevOps/platform engineering focused on GCP in production.
• Experience designing and implementing secure CI/CD pipelines with automated security gates, policy enforcement, and compliance checks.

Responsibilities

• Design and implement secure CI/CD pipelines that move code from development to production with security gates.
• Architect and manage GKE/Kubernetes environments with multi-tenant design and WIF binding.
• Provision and manage GCP infrastructure using Terraform for tenantized projects and parity across environments.
• Operationalize Vertex AI for long-running batch jobs with scheduling, monitoring, and recovery.
• Design and manage cross-cloud networking using Interconnect, IAP, and firewall topology.
• Lead pre-production security hardening and deploy API gateways with authentication and threat protection policies.
• Establish monitoring, alerting, and cost optimization across GCP environments.
• Collaborate with engineering teams to define platform standards and reduce operational overhead.

Skills

GCP

CI/CD

Kubernetes

Terraform

Vertex AI

IAP

Cloud Endpoints

Apigee

Security

Linux

Tools

Terraform

GKE

Vertex AI

Workload Identity Federation

IAP

Cloud Endpoints

Apigee

Job description

At Lumenalta, we partner with forward-thinking organizations to build technology solutions that scale, delight users, and accelerate business growth. Our global teams bring curiosity, commitment, and technical excellence to every project. We value transparency, autonomy, and impact—empowering every team member to do their best work.

We’re seeking a Senior GCP DevOps Engineer with a strong DevSecOps mindset to join a high-impact cloud platform engagement. This is a hands‑on senior role focused on building secure CI/CD pipelines, hardening GCP infrastructure across multi‑tenant environments, and operationalizing Vertex AI workloads—all within a complex cross‑cloud networking topology spanning GCP, AWS, and on‑premises systems.

Actively Hiring

We are hiring for a current opening on an active client project. This is a specific, presently open role. We review applications on a rolling basis and aim to move qualified candidates through our process promptly.

What You’ll Be Doing

• Design and implement secure CI/CD pipelines that move code from development to production with zero security exceptions—embedding automated security gates, policy enforcement, and compliance checks at every stage of the delivery process.
• Architect and manage GKE/Kubernetes environments, including namespace design, multi-tenant cluster configuration, and Workload Identity Federation (WIF) binding for secure, keyless service authentication.
• Provision and manage GCP infrastructure using Terraform, including Project-per-tenant setups, resource hierarchy design, and maintaining environment parity across development, staging, and production.
• Operationalize Vertex AI for long-running asynchronous batch jobs (1hr+)—covering job scheduling, resource configuration, monitoring, and failure recovery patterns.
• Design and manage cross‑cloud networking using Partner Cross Cloud Interconnect (GCP AWS / on‑prem), Identity‑Aware Proxy (IAP), and firewall topology to ensure secure, low‑latency hybrid and multi‑cloud connectivity.
• Lead pre‑production security hardening activities and deploy API gateways (Cloud Endpoints, Apigee, or equivalent) with proper authentication, rate limiting, and threat protection policies.
• Establish monitoring, alerting, and cost optimization practices across GCP environments, ensuring infrastructure reliability and FinOps accountability.
• Collaborate with engineering teams to define platform standards, reduce operational overhead, and support smooth handoffs from professional services to internal teams.

Requirements

• 7+ years of professional experience in DevOps or platform engineering roles, with a strong focus on GCP in production environments. A technical assessment will be required.
• Proven experience designing and implementing secure CI/CD pipelines that move code from development to production with zero security exceptions—including automated security gates, policy enforcement, and compliance checks at every stage.
• Senior‑level hands‑on experience with Google Kubernetes Engine, including namespace architecture, multi‑tenant cluster design, and Workload Identity Federation (WIF) binding for secure, keyless service authentication.
• Deep expertise with Terraform for GCP provisioning, including Project-per-tenant setups, resource hierarchy design, and management of environment parity across dev, staging, and production.
• Experience provisioning and operationalizing Vertex AI for long‑running asynchronous batch jobs (1hr+), including job scheduling, resource configuration, monitoring, and failure recovery patterns.
• Hands‑on experience with Partner Cross Cloud Interconnect (GCP AWS / on‑prem), Identity‑Aware Proxy (IAP), and firewall topology design for secure, low‑latency hybrid and multi‑cloud environments.
• Experience leading pre‑production security hardening processes and deploying API gateways (Cloud Endpoints, Apigee, or equivalent) with proper authentication, rate limiting, and threat protection policies.
• Strong background in Linux administration.
• Strong written and verbal communication skills in English.

Why Lumenalta is an amazing place to work at

At Lumenalta, you can expect that you will:

• Be 100% dedicated to one project at a time so that you can innovate and grow.
• Be a part of a team of talented and friendly senior‑level developers.
• Work on projects that allow you to use leading tech.

Location:

This is a fully remote position open to candidates based in Latin America (LATAM). While location is flexible, candidates must be willing to maintain at least a 6‑hour overlap with core business hours, which are primarily aligned with the Pacific, Central, or Eastern U.S. time zones to ensure effective collaboration with project teams.

Application Deadline

Applications will be accepted until September 6, 2026. Candidates can expect feedback by September 14, 2026.