Redwood Software is seeking a Senior DevOps Engineer specializing in Google Cloud Platform (GCP). As the primary GCP specialist within our experienced CloudOps team, you will be responsible for designing, operating, and evolving secure and reliable GCP environments for mission-critical workloads. Your work will focus on infrastructure automation, security-first architecture, and building observable, resilient systems.
What You'll Do
- Design, implement, and operate production GCP infrastructure with high availability, scalability, and resilience.
- Ensure high reliability and performance of services and proactively resolve issues.
- Participate in on-call rotations and drive post-incident reviews and blameless post-mortems.
- Collaborate with engineers to ensure cross-cloud consistency in IAM philosophy, tagging, observability standards, Terraform patterns, and security controls.
- Design and maintain IAM strategies, including least privilege, service accounts, role design, and separation of duties.
- Implement and operationalize security controls such as organization policies, audit logging, and key management.
- Partner with security teams to meet compliance requirements and improve cloud security posture.
- Architect GCP networking patterns including VPCs, shared VPCs, firewall policies, routing, load balancing, and private service access.
- Drive secure connectivity patterns between services and environments, including hybrid connectivity where applicable.
- Troubleshoot complex network and connectivity issues across cloud services.
- Lead automation initiatives for provisioning and operational tasks using infrastructure-as-code and CI/CD pipelines.
- Build and maintain tooling and standards for observability, including metrics, logs, traces, dashboards, and alerting.
- Continuously improve developer experience through reusable modules, templates, and documentation.
- Support and optimize cloud data services such as BigQuery and BigTable, including security, access patterns, and performance considerations.
- Collaborate with engineering and analytics stakeholders on scalable data workflows and governance.
What We're Looking For
- 5+ years in cloud engineering, SRE, DevOps, or infrastructure engineering roles with significant GCP experience.
- Strong hands-on experience with GCP IAM, including service accounts, custom roles, and least privilege design.
- Strong understanding of GCP networking, including VPC design, routing, firewalling, load balancing, and private connectivity patterns.
- Experience implementing cloud security controls and best practices like logging, encryption, key management, and policy guardrails.
- Proficiency in infrastructure-as-code and automation (Terraform strongly preferred) and scripting in Python, Bash, or Go.
- Experience operating production environments with strong troubleshooting skills and an observability mindset.
Nice to Have
- Experience with BigQuery and Bigtable regarding security, access management, performance tuning, and operations.
- Experience with Kubernetes on GKE.
- Familiarity with SIEM/SOAR tooling or cloud security posture management approaches.
- Google Cloud certifications are a plus (Professional Cloud Architect, Professional Cloud Security Engineer, Professional Cloud Network Engineer, etc.).
- Experience in agile teams (Scrum, Kanban) and fast-moving scale-up environments.
- Hands-on GitLab experience is a plus.
Technical Stack
- Google Cloud Platform (GCP)
- Terraform
- Python, Bash, Go
- BigQuery, Bigtable
- GKE
- IAM, VPC
- CI/CD
Team & Environment
You will be the primary GCP specialist within an experienced CloudOps team, partnering closely with multi-cloud engineers.
Benefits & Compensation
- Compensation: $125,000 - $160,000 USD
- Remote first culture
- Flex PTO
- Health, Dental and Vision Insurance
- 13 Paid Holidays
- Company volunteer days
Work Mode
This is a remote position open to candidates in the US and Canada.
NMI is committed to providing equal employment opportunity for all persons regardless of race, color, religion, sex, age, marital status, national origin, sexual orientation or sexual identity, genetic information, citizen status (except those that do not have the legal right to be employed in the United States), disability, military service, service member, veteran status, or any other basis protected by applicable law.
