Cloud Platform Engineer

About the Position

We are seeking a Cloud Platform Engineer to join our remote team in Romania, focusing on building and improving infrastructure on Google Cloud.

Responsibilities

• Infrastructure on GCP: Build, operate, and further develop the product team's infrastructure on Google Cloud (GKE, Cloud Run, IAM, VPC, Load Balancing, DNS, Secret Manager).
• Infrastructure as Code: Implement and maintain infrastructure with Terraform, using centrally managed modules and pipelines; contribute improvements back to the shared modules.
• CI/CD: Build and operate application pipelines in GitLab CI/CD, including GitLab components and runners across environments.
• Core platform components: Integrate and use logging, secrets, IAM, VPC, and DNS.
• Secure defaults: Apply secure defaults for IAM, secrets, networking, TLS, and policies.
• Operations: Support day-to-day operations, including incident response, infrastructure maintenance, and performance analysis.
• Collaboration: Work with the other platform teams to use and improve shared Terraform modules and policies; document standards and present designs in engineering reviews.
• Kubernetes: Manage Kubernetes resources (deployments, RBAC, networking, policies, upgrades) and Helm releases, with GitOps delivery via Flux and Flagger.

Requirements

• 4+ years in DevOps, Platform, or Cloud Engineering, with hands-on production ownership, not only consuming infrastructure built by others.
• Landing zones: Has set up, reworked, or extended a GCP or AWS landing zone.
• Kubernetes: Has configured, managed, and improved GKE or EKS setups in production, including Kubernetes resources (deployments, RBAC, networking, policies, upgrades) and Helm releases. Experience with GitOps (Flux) and progressive delivery (Flagger).
• Serverless: Knows Cloud Run and Cloud Functions (or AWS equivalents), including their trade-offs.
• Secrets management: Has integrated Google Cloud Secret Manager or AWS Secrets Manager in a mid-to-large company setup.
• Cloud networking: Has set up or reworked a cloud network on GCP and/or AWS (VPC design, routing, firewalls, private connectivity).
• Artifact management: Has implemented Google Artifact Registry or AWS CodeArtifact in a mid-to-large company setup.
• GitLab: Knows a cross-environment GitLab runner setup and has migrated use cases to GitLab CI/CD components or GitHub Actions.
• Terraform: Productive use of Terraform with modular repositories, multiple environments, and plan/apply in CI/CD.
• Observability: Monitoring and alerting with Datadog or GCP Monitoring.
• Fluent English, spoken and written.

Nice to Have

• GCP landing zone tooling: Cloud Foundation Fabric (FAST), Enterprise Foundation Blueprint, or the terraform-google-modules project factory.
• Shared VPC, Private Service Connect, hybrid connectivity (HA VPN / Interconnect).
• Organization Policies, VPC Service Controls, Cloud KMS / CMEK, Security Command Center.
• Keyless CI/CD authentication via Workload Identity Federation.
• Cloud Armor in production.
• Datadog configured as code, Managed Prometheus / PromQL, SLO-based alerting.
• Dependency automation at scale (Renovate).
• Go or Python for internal platform tooling.
• GCP Professional certification (Cloud Architect, DevOps Engineer, or Network Engineer).
• Experience in an enterprise platform team serving many product teams, or in retail / e-commerce.
• German language.

We Offer

• Work on a large-scale, GCP-first enterprise platform with a mature platform engineering practice.
• An international team and a growing Cloud Platform cluster in Bucharest.
• Hybrid setup with a Bucharest office.
• Competitive package, depending on experience and contract type (B2B or employment).
• Support from CloudHero, an AWS and cloud-native consultancy, and its community of DevOps and platform engineers.

About the Company

Cloud Hero is a leading cloud-native consultancy, providing expert guidance and support to enterprises in their cloud journey. Our team is dedicated to building and maintaining robust, scalable, and secure cloud infrastructures.