Senior GCP Cloud Engineer - Data, Security & Automation

Capgemini; New York (NY); On-site; USD 72,000 - 105,000; Full time

Benefits offered by this job

401(k)

Health insurance

Paid time off

Job summary

Capgemini in New York seeks a highly skilled Cloud Platform Engineer to design and operate Google Cloud infrastructure for enterprise clients. You will manage IAM, VPCs, data services, automation with Terraform, CI/CD, and observability, while aligning with regulatory requirements and delivering reliable, cost-aware solutions.

This role emphasizes client-facing delivery, security controls, and multi-tenant considerations in a fast-paced consulting environment.

Qualifications

• 5+ years of cloud or platform engineering experience, including production Google Cloud.
• Deep GCP fluency: IAM, VPC and Private Service Connect, VPC Service Controls, Cloud Run, BigQuery, Cloud Storage, Pub/Sub, and Cloud KMS.
• Terraform and CI/CD for cloud infrastructure.
• Security engineering on GCP: organization policy, audit logging, secrets management, CMEK, and Sensitive Data Protection.
• Observability design: Cloud Monitoring, Logging, alerting, and service-level objectives.
• Strong scripting in Python or Bash, and working SQL for BigQuery administration.
• Experience in regulated industries, ideally financial services: data residency, consent frameworks, GLBA, Fair Lending, and UDAAP.
• Ability to operate in client-facing consulting delivery contexts, translating business requirements into technical specifications.

Responsibilities

• Design and operate the Google Cloud resource hierarchy: organization, folders, and projects per environment and per tenant, with organization policy and labels.
• Own identity and access: IAM roles (predefined and custom), service accounts, Workload Identity Federation, short-lived credentials, and least-privilege reviews.
• Own networking: VPC design, Private Google Access, Private Service Connect, firewall policy, and DNS.
• Implement VPC Service Controls perimeters and the controlled egress gate between the client and Capgemini environments.
• Own encryption and secrets: Cloud KMS with customer-managed keys, Secret Manager, and key rotation.
• Run Sensitive Data Protection (DLP) scanning and de-identification at the landing boundary, with audit logging and retention for PII reads.
• Provide the control evidence that supports GLBA, Fair Lending, UDAAP, and TCPA/CAN-SPAM alignment.
• Operate the data services: Cloud Storage lifecycle and retention, BigQuery administration, Pub/Sub, Dataflow, Datastream, and Spanner including Spanner Graph.
• Operate the application tier: Cloud Run services, Artifact Registry, Cloud Build, Cloud Scheduler, and Workflows, including run-time settings, scaling, and concurrency.
• Provide the foundation Databricks on GCP needs: projects, VPC, service accounts, and GCS buckets.
• Provision everything as code with Terraform, with CI/CD promotion gates, policy-as-code checks, and drift detection.
• Own release management for Cloud Run services: revisions, traffic splitting, rollback, and image hygiene.
• Own Cloud Logging, Monitoring, and Trace: service-level objectives, alerting, runbooks, and incident response.
• Own disaster recovery and high availability design: backup, regional and multi-region choices, and RPO and RTO targets.
• Own FinOps: billing export to BigQuery, budgets and alerts, labels, committed use and reservation decisions, and cost allocation per tenant.
• Meet the serving contract the agentic layer depends on: predictable latency and per-client isolation.

Skills

Google Cloud

IAM

VPC

Terraform

CI/CD

Python or Bash

SQL

Consulting

Security engineering

Tools

Terraform

CI/CD pipelines

Cloud Run

BigQuery

KMS/Secret Manager

Job description

Capgemini in New York seeks a highly skilled Cloud Platform Engineer to design and operate Google Cloud infrastructure for enterprise clients. You will manage IAM, VPCs, data services, automation with Terraform, CI/CD, and observability, while aligning with regulatory requirements and delivering reliable, cost-aware solutions.

This role emphasizes client-facing delivery, security controls, and multi-tenant considerations in a fast-paced consulting environment.