Infrastructure Engineer

Beyond Data Consulting, LLC; New York, Northern (NY, KY); Hybrid; USD 96,000 - 138,000; Part time

Job summary

Beyond Data Consulting, LLC is seeking an Infrastructure Engineer to own provisioning, maintenance, and security for client environments in GCP. You will design and implement IaC with Terraform, CI/CD, and strong access controls, while aligning with SOC 2/ISMS requirements.

You will collaborate with senior engineers and client stakeholders in a fast-paced, consultancy setting, performing deployments across multiple clouds and client environments with a focus on security and reliability.

Qualifications

• GCP networking and security including VPC, IAM, firewall/WAF, DNS.
• Experience with CI/CD pipelines and cloud monitoring/alerting (GitHub Actions).
• Terraform/infrastructure-as-code deployed through CI/CD.

Responsibilities

• Own Infrastructure as Code in GCP using Terraform and CI/CD pipelines.
• Design security posture with Cloud Armor, IAP, API Gateway, and SSO.
• Define access with least-privilege IAM and secret hygiene.
• Own SOC 2 compliant infrastructure with evidence and audits (SOC 2/ISMS).
• Architect deployment and exposure across client environments.
• Join daily standups and weekly planning to manage velocity.
• Coordinate with client technical contact and weekly check-ins.

Skills

GCP networking

GCP security

GitHub Actions CI/CD

Terraform

IAM

Tools

Terraform

GitHub Actions

Cloud Run

GKE

Cloud SQL

Job description

Date of Posting: 2026-09-29
Duration: Open-ended engagement
Commitment: 10 to 15 hrs/wk
Pay Structure: Hourly Contract
Location: Anywhere, but must be able to get on calls during NYC, US working hours
Start Date: ASAP

About Beyond Data

We are a boutique Data & AI consultancy of 10–15 senior engineers. We don’t negotiate quality, our execution pace is fast, our workflows are lean, and we treat our timelines and client commitments with respect.

We are looking for an Infrastructure Engineer who can own provisioning, maintenance and can recommend the best alternative to our clients and internal team for different use cases.

The Mission

You will sit at the intersection of our engineering team and client stakeholders. Your goal is to understand a problem and propose the most suitable course of action for it, taking into account security requirements, understanding the client’s constraints, and explaining why that’s the way to go.

It’s an opportunity to own decision making, stakeholder communication and execution, not to provision resources and lay back.

What You’ll Do

• Own Infrastructure as Code: provision and maintain client and internal environments in GCP with Terraform (Cloud Run, Cloud SQL, GKE, load balancers, VPC, Secret Manager, BigQuery) shipped through CI/CD and reviewed like any other code.
• Design the security posture: protect services from attack and unauthorized access: Cloud Armor WAF (OWASP rules, rate limiting, L7-DDoS Adaptive Protection), edge and ingress design (IAP, API Gateway, LB-only ingress), and SSO (SAML / OIDC — Entra, Okta) for first‑party apps.
• Define access for people and services: least‑privilege IAM, Workload Identity Federation across GCP / AWS / GitHub (no long‑lived keys), and disciplined service‑account and secret hygiene.
• Own compliance‑grade infrastructure (SOC 2): build and evidence the controls behind SOC 2 / ISMS; audit boundary and System Description, asset inventory, backups + PITR and deletion protection, BC/DR with real RPO/RTO, VPC flow logs and Data Access audit logging as evidence, monitoring and alerting, and Security Command Center findings triage. Turn an auditor's questions into concrete infrastructure changes.
• Architect deployment and exposure. Design how applications are deployed and exposed to support scale and the development lifecycle, across multiple client environments.
• Stay plugged into execution. Join daily standups (15–25 min) and weekly planning (1 hr) to keep a live pulse on velocity and surface blockers early.
• Manage the relationship with a technical point of contact in the client organization - field their questions and requests, and hold a weekly check‑in meeting.

What We’re Looking For

Must have

• GCP networking & security: VPC, IAM, firewall / WAF, private connectivity, DNS.
• Comfort owning CI/CD (GitHub Actions) and cloud monitoring & alerting.
• Terraform / infrastructure‑as‑code in production, shipped through CI/CD.

Nice to have

• SOC 2 / ISO 27001: building controls and producing audit evidence (Sprinto, Vanta, or similar).
• GKE, Cloud Run, and Cloud SQL operational experience.
• Cross‑cloud identity: Workload Identity Federation, GCP AWS .
• Consultancy / agency background: managing multiple external client stakeholders at once .
• Experience with Linear as PMS.

Why Join Us?

• High autonomy: a small, senior team where your delivery improvements will have an immediate, visible impact.
• Zero fluff: we work with senior engineers who ship consistently. No micromanagement, no endless committee meetings.
• Respect for commitments: we treat timelines seriously and give you the full backing you need to hold scope boundaries with clients.