GCP Network Engineer

TechDigital Group; Pleasanton (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

TechDigital Group in Pleasanton, CA seeks an L3 GCP Network Engineer to design, implement, and optimize complex GCP networks at scale. You will architect multi‑VPC, hub‑and‑spoke, Shared VPC, and hybrid/multi‑cloud connectivity while leading security postures and incident RCA.

The role requires 8+ years in network engineering, deep routing knowledge, and strong IaC experience (Terraform/Ansible). You’ll mentor junior staff and contribute to governance and roadmaps.

Qualifications

• 8+ years of network engineering with large‑scale networks.
• Strong routing knowledge: BGP, OSPF/IGP, VRFs, MPLS/SD-WAN.
• Production GCP networks design/operation with hybrid connectivity.
• Automation/IaC with Terraform, Ansible, pipelines.

Responsibilities

• Design secure, highly available, scalable GCP network topologies.
• Lead implementation of Interconnect, VPNs, load balancing, Cloud Armor.
• Own end‑to‑end network security posture with firewall strategies and zero‑trust.
• Serve as L3 escalation for complex incidents and perform RCA.
• Define standards, naming, tagging, connectivity models for GCP networks.
• Drive IaC for networking and CI/CD for network changes.
• Mentor L1/L2 engineers and align designs with compliance requirements.
• Evaluate new GCP networking features and create adoption roadmaps.

Skills

Network engineering

GCP networking

Routing protocols

IaC automation

Education

Google Professional Cloud Network Engineer

CCNP/CCIE or equivalent

Tools

Terraform

Deployment Manager

Ansible

CI/CD pipelines

Job description

Role summary

An L3 GCP Network Engineer is a senior engineer responsible for designing, implementing, and optimizing complex network architectures on GCP, and acting as the final escalation point for critical issues.

Key responsibilities

• Design and architect secure, highly available, and scalable GCP network topologies including multi‐VPC, hub‐and‐spoke, Shared VPC, hybrid and multi‐cloud connectivity.
• Lead implementation of advanced networking: Cloud Interconnect, Cloud VPN topologies, global and regional load balancing, Cloud Armor policies, Private Service Connect, VPC peering, custom route designs.
• Own end‐to‐end network security posture in GCP in partnership with security teams: firewall strategies, segmentation, zero‐trust patterns, DDoS protection, perimeter and egress controls.
• Serve as L3 escalation for complex production incidents, doing deep packet, routing, and performance analysis, and driving root cause analysis and long‐term fixes.
• Define standards, patterns, and best practices for GCP network designs, address planning, naming, tagging, and connectivity models.
• Drive automation and Infrastructure as Code for networking (Terraform, Deployment Manager, CI/CD for network changes, policy‐as‐code).
• Mentor L1/L2 engineers, review designs and changes, and provide training on GCP networking.
• Work with architects and stakeholders to align network designs with business, security, and compliance requirements (e.g., data residency, regulatory constraints).
• Evaluate new GCP networking features and third‐party solutions, build PoCs, and create adoption roadmaps.

Typical requirements

• 8+ years of network engineering with strong experience across routing, switching, firewalls, and large‐scale networks; substantial hands‐on GCP networking.
• Deep knowledge of routing protocols and enterprise networking concepts (BGP, OSPF/IGP, VRFs, MPLS or SD‐WAN concepts, VPN, QoS, high availability).
• Proven experience designing and operating production GCP networks (or equivalent cloud) at scale, including hybrid connectivity and multi‐region architectures.
• Strong experience with automation and IaC (Terraform, Ansible, pipelines) for network deployments.
• Certifications strongly preferred: Google Professional Cloud Network Engineer (and possibly Professional Cloud Architect), CCNP/CCIE or equivalent senior networking credentials