DevOps Infrastructure Engineer – L2 (GCP)

Job Description: DevOps Infrastructure Engineer – L2 (GCP)

Experience: 4+ Years
Location: Remote
Role Level: L2 – Cloud Infrastructure & DevOps
Work Environment: 24×7 Cloud Managed Services
Cloud Platform: Google Cloud Platform (GCP)

Note : Passport is mandatory

Role Overview
We are looking for a skilled DevOps Infrastructure Engineer – L2 to manage, automate, and maintain a mission-critical Google Cloud Platform (GCP) environment within a 24×7 cloud managed services model.
The ideal candidate will have strong hands-on experience with GCP, Terraform, CI/CD pipelines, Kubernetes (GKE), cloud networking, and infrastructure automation. The candidate will be responsible for maintaining infrastructure as code, managing platform operations, troubleshooting production incidents, and supporting the L1 team in resolving infrastructure and deployment issues.
The role operates within an ITIL-aligned, SLA-driven environment and requires close collaboration with Cloud Architects, Security and Network teams, and client stakeholders.

Key Responsibilities
1. GCP Infrastructure & Infrastructure as Code (IaC)
Maintain, enhance, and manage Terraform codebases for GCP landing zones, including projects, folders, VPCs, IAM, organization policies, and shared services.
Develop reusable Terraform modules and templates to standardize Sandbox, Development, QA, Staging, and Production environments.
Manage Terraform state, workspaces, dependencies, and infrastructure provisioning workflows.
Identify and remediate configuration drift and maintain consistent infrastructure configurations across environments.

2. CI/CD & Automation
Build, maintain, and optimize CI/CD pipelines for infrastructure provisioning and platform deployments.
Work with tools such as Google Cloud Build, GitLab CI, GitHub Actions, Jenkins, or Azure DevOps.
Implement approval gates, change management controls, security scanning, and policy-as-code checks within deployment pipelines.
Automate repetitive operational activities using Bash, Python, Terraform, and the gcloud CLI.
Maintain Git-based workflows and support reliable, controlled infrastructure releases.

3. Kubernetes & GKE Operations
Operate and maintain Google Kubernetes Engine (GKE) clusters in production environments.
Manage cluster upgrades, node pools, autoscaling, workload health, and resource utilization.
Deploy and manage applications using Helm charts and container technologies such as Docker.
Troubleshoot Kubernetes workloads, networking, scheduling, resource constraints, and deployment failures.
Support cluster reliability, performance optimization, and operational best practices.

4. GCP Services & Cloud Operations
Manage GCP services, including Compute Engine, Cloud Storage, Cloud SQL, and other agreed cloud services.
Perform patching, upgrades, backup and restore operations, capacity planning, and resource optimization.
Implement cloud infrastructure changes through Terraform and approved automation workflows.
Ensure infrastructure availability, reliability, and operational consistency across environments.

5. Cloud Networking & Security
Configure and troubleshoot VPCs, subnets, routing, Cloud Load Balancing, Cloud VPN, Cloud Interconnect, firewall rules, and DNS.
Implement least-privilege IAM policies and manage secrets through Google Cloud Secret Manager.
Enforce organization policies and remediate security vulnerabilities, misconfigurations, and compliance findings.
Collaborate with security and network teams to implement secure cloud infrastructure configurations.

6. Monitoring, Incident Management & Production Support
Configure and maintain Cloud Monitoring dashboards, Cloud Logging, alert thresholds, and service-level objective (SLO)-based alerts.
Develop automated remediation and self-healing mechanisms for recurring infrastructure alerts.
Act as an L2 escalation point for infrastructure, Kubernetes, and CI/CD incidents.
Participate in P1/P2 incident bridges, troubleshoot production issues, and contribute to root cause analysis (RCA).
Execute infrastructure changes through the client's IT Service Management (ITSM) and change management workflows.
Maintain operational runbooks, Standard Operating Procedures (SOPs), and the Known Error Database (KEDB).

7. FinOps & Continuous Improvement
Implement cloud cost optimization measures, including resource labelling, rightsizing, idle resource cleanup, and committed-use discounts.
Identify opportunities to improve infrastructure reliability, automation, operational efficiency, and cloud resource utilization.
Ensure operational documentation remains current and support continuous improvement across managed services.

Mandatory Technical Skills
Google Cloud Platform (GCP): Hands-on experience with Compute Engine, GKE, VPC, IAM, Cloud Storage, Cloud SQL, Cloud Monitoring, and Cloud Logging.
Terraform: Strong experience with Infrastructure as Code, reusable modules, state management, workspaces, and infrastructure provisioning.
CI/CD: Practical experience with at least one of Google Cloud Build, GitLab CI, GitHub Actions, Jenkins, or Azure DevOps.
Kubernetes & Docker: Experience in Kubernetes cluster operations, workload troubleshooting, container management, and Helm deployments.
Scripting & Automation: Proficiency in Bash, Python, and the gcloud CLI.
Cloud Networking: Good understanding of VPC design, routing, load balancing, VPN, firewall rules, and DNS.
Cloud Security: Experience with IAM least privilege, Secret Manager, organization policies, and secure infrastructure configurations.
Monitoring & Troubleshooting: Experience with cloud monitoring, logging, alerting, incident investigation, and production troubleshooting.
ITIL & ITSM: Understanding of incident, problem, and change management in an SLA-driven production support environment.

Experience & Qualifications
4–7 years of experience in DevOps, cloud infrastructure, cloud engineering, or Site Reliability Engineering (SRE).
At least 2 years of hands-on experience managing GCP workloads in production.
Proven experience delivering Terraform-managed infrastructure and CI/CD pipelines in an enterprise environment.
Experience supporting 24×7 cloud managed services or production environments with defined SLAs.
Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.

Certifications
Required – At least one of the following:
Google Cloud Professional Cloud DevOps Engineer
Google Cloud Professional Cloud Architect

Preferred:
HashiCorp Certified: Terraform Associate
Certified Kubernetes Administrator (CKA)
Google Cloud Professional Cloud Network Engineer
Google Cloud Professional Cloud Security Engineer
ITIL 4 Foundation

Preferred / Nice-to-Have Skills
Experience designing and managing GCP landing zones or using the Cloud Foundation Toolkit.
Familiarity with Security Command Center and BigQuery.
Experience with GitOps tooling, Secure Source Manager, and Artifact Registry.
Knowledge of policy-as-code tools such as OPA/Gatekeeper and IaC scanning tools such as Checkov or tfsec.
Familiarity with Prometheus, Grafana, SLOs, error budgets, and AIOps tooling.
Experience working with ServiceNow or similar ITSM platforms.
Exposure to cloud cost governance and enterprise security compliance requirements.

Soft Skills
Strong written and verbal communication skills for client meetings, incident updates, and RCA reports.
Calm, structured problem-solving approach during critical P1/P2 incidents.
Strong ownership mindset, with an emphasis on documentation, automation, and continuous improvement.
Ability to collaborate effectively with architects, security teams, network engineers, L1 support, and client stakeholders.
Flexibility to work in rotating shifts and a 24×7 managed services environment.

Ideal Candidate Profile
We are looking for a hands-on L2 DevOps Infrastructure Engineer who can independently manage GCP infrastructure, maintain Terraform automation, operate GKE clusters, and resolve production issues within an SLA-driven environment.
Candidates should demonstrate practical production experience rather than only theoretical cloud knowledge or application-level DevOps exposure.