GCP Cloud Engineer

Design, build, and maintain reusable Terraform modules for core GCP services — GKE, Cloud Run, BigQuery, Cloud SQL, Pub/Sub, VPC networking, IAM, KMS, and Cloud Storage. Establish IaC standards, module versioning strategy, and a private module registry. Implement automated CI/CD pipelines for infrastructure (Cloud Build, GitHub Actions, or GitLab CI) with plan/apply gating, drift detection, and policy validation. Embed Policy-as-Code using Open Policy Agent (OPA/Rego), Sentinel, or GCP Organization Policies to enforce security and compliance guardrails. Manage Terraform state at scale (remote backends, workspace strategy, state isolation per environment).
Service Catalog Build and operate a self-service Service Catalog (e.g., Backstage, GCP Service Catalog, or equivalent) where developers can provision approved cloud building blocks on demand. Create golden-path templates and blueprints for common patterns: microservice on GKE, event-driven workload on Pub/Sub + Cloud Run, data pipe...