Google Cloud Engineer

Dragos is a global xOT cybersecurity company that protects critical infrastructure systems. The Google Cloud Engineer will design, build, and maintain the Google Cloud infrastructure supporting the internal IT environment, owning GCP architecture end to end. The role also covers infrastructure automation, security, monitoring, troubleshooting, documentation, collaboration, and support for hybrid and multi-cloud environments.

Responsibilities:

• Cloud Architecture: Design, deploy, and maintain GCP infrastructure, including Compute Engine, GKE, Cloud Storage, IAM, and Cloud Interconnect, following well-architected framework principles
• Infrastructure as Code: Automate provisioning and configuration using Terraform or similar IaC tooling; maintain version-controlled, repeatable deployments
• Security and Compliance: Implement IAM best practices, VPC Service Controls, and Security Command Center policies; partner with the security team on audits and hardening
• Monitoring and Cost Management: Monitor performance, availability, and spend across GCP environments; recommend and implement optimizations
• Troubleshooting: Diagnose and resolve connectivity, performance, and configuration issues affecting GCP workloads
• Documentation: Maintain clear architecture diagrams, runbooks, and standard operating procedures for cloud infrastructure
• Collaboration: Work with IT systems administrators, security, and engineering teams to support day-to-day operations and larger infrastructure projects
• Cross-Cloud and Networking Support:Pitch in on Microsoft Azure and AWS workloads and cloud/on-premises networking as needed; this is a secondary part of the role, not the main focus

Requirements:

• 5 years of experience in cloud engineering or infrastructure roles, with strong, hands-on Google Cloud Platform experience
• Strong understanding of GCP architecture: Compute Engine, GKE, Cloud Storage, VPC, IAM, and Cloud Interconnect
• Experience with Infrastructure as Code (Terraform preferred)
• Scripting ability in Python, Bash, or a similar language
• Clear written and verbal communication, with the ability to document systems for both technical and non-technical audiences
• Working knowledge of Microsoft Azure, including networking, virtual machines, storage, and identity (Entra ID) — helpful, not required
• Working knowledge of AWS, including core compute, storage, networking (VPC), and IAM services
• Familiarity with cloud networking concepts: VPC design, VPNs, peering, load balancing, DNS, and firewall policy
• Exposure to traditional infrastructure networking: routing and switching, VLANs, firewalls, and TCP/IP fundamentals
• Experience with Kubernetes (GKE or otherwise) for container orchestration and workload management
• Familiarity with Claude Code or similar AI coding assistants for scripting and automation work
• Experience supporting IT or cloud infrastructure integration during mergers and acquisitions (M&A), including onboarding acquired environments and consolidating tooling
• Google Professional Cloud Architect, Professional Cloud Network Engineer, or equivalent certification, preferred
• Microsoft Azure or AWS certification (e.g., AZ-104, AZ-700, AWS Certified Solutions Architect) preferred
• Experience operating in a hybrid, multi-cloud environment with on-premises data center connectivity, preferred
• Familiarity with security and compliance frameworks such as SOC 2 or NIST, preferred
• Experience with monitoring and observability tools (e.g., Cloud Monitoring, Datadog) preferred