DevOps Engineer

JOB DESCRIPTION TERRAFORM / GCP DEVOPS ENGINEER (Cloud Infrastructure) POSITION OVERVIEW We are seeking an experienced Terraform/GCP DevOps Engineer to join our managed engineering team delivering infrastructure and cloud operations You will be responsible for: Designing, building, and maintaining enterprise-grade infrastructure on Google Cloud Platform (GCP) Managing Infrastructure-as-Code (Terraform) across production environments Building and optimizing CI/CD pipelines for continuous deployment Ensuring platform reliability, security, and cost efficiency Leading disaster recovery, backup strategies, and business continuity Mentoring other engineers on infrastructure and cloud best practices KEY RESPONSIBILITIES Infrastructure Design & Architecture Design and architect scalable, resilient cloud infrastructure on GCP for production workloads Define infrastructure patterns, standards, and best practices for the platform Evaluate cloud services and tooling (Cloud Run, Cloud Functions, Firestore, BigQuery, Pub/Sub, etc.) Plan capacity and auto-scaling strategies to meet SLA requirements (99%+ availability) Design disaster recovery (DR) and business continuity (BC) architectures (RTO: 1 day, RPO: 24 hours) Document architecture decisions (ADRs) and maintain up-to-date system design documentation Conduct architecture reviews with engineering teams to ensure alignment with IKEA standards Infrastructure-as-Code & Terraform Build and maintain Terraform modules for all GCP resources (compute, networking, storage, databases, security) Manage Terraform state securely with remote state backend (GCS + Terraform Cloud) Implement infrastructure versioning, testing, and code review workflows Automate infrastructure provisioning, scaling, and updates Ensure infrastructure code is modular, reusable, and well-documented Maintain 100% Infrastructure-as-Code coverage (zero manual changes in production) Plan and execute infrastructure updates with zero-downtime deployments Implement drift detection and auto-remediation for infrastructure state CI/CD Pipeline & Deployment Automation Design and maintain GitHub Actions CI/CD pipelines for infrastructure and application deployments Implement automated testing for infrastructure code (Terraform validation, policy checks, security scanning) Build deployment automation and orchestration (Blue-green deployments, canary releases) Manage secrets and credentials securely (Google Secret Manager, encrypted Terraform variables) Implement automated rollback procedures and chaos engineering tests Monitor deployment quality metrics (change failure rate, mean time to recovery) Work with Cloudflare for edge deployment and traffic management Cloud Operations & Reliability Manage GCP project structure, IAM policies, and security controls Implement monitoring, observability, and alerting across all infrastructure components Set up and optimize cloud resource monitoring (Cloud Monitoring, Cloud Logging, Trace) Manage cloud budgets, cost optimization, and resource efficiency Execute routine operational tasks: backups, maintenance windows, security patching Participate in on-call rotation for infrastructure incidents (P1/P2) Troubleshoot infrastructure issues and optimize performance Maintain detailed runbooks and disaster recovery procedures Security, Compliance & Cost Management Implement infrastructure security best practices (network segmentation, encryption, IAM least privilege) Manage firewall rules, VPC configuration, Cloud Armor, and DDoS protection Ensure compliance with security standards, data residency, and privacy requirements Conduct infrastructure security audits and vulnerability assessments Manage data backup and encryption strategies Implement cost optimization strategies (reserved instances, committed use discounts, resource optimization) Monitor and reduce cloud spend while maintaining performance Manage cloud provider relationships and licensing Mentoring & Knowledge Transfer Mentor junior/mid-level engineers on infrastructure, cloud platforms, and DevOps best practices Lead knowledge transfer sessions on Terraform, GCP, and CI/CD best practices Contribute to team documentation and internal knowledge base Participate in code reviews for infrastructure and deployment changes Lead design reviews and architecture discussions REQUIRED QUALIFICATIONS Experience 5+ years of professional DevOps/Cloud Infrastructure engineering experience 3+ years of hands-on experience with Terraform in production environments (preferably managing 50+ resources) 3+ years of production experience on Google Cloud Platform (GCP) or equivalent (AWS/Azure) with deep expertise in 2+ major GCP services 2+ years managing CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, or similar) Proven experience building and maintaining disaster recovery (DR) and business continuity (BC) strategies Experience operating customer-facing, high-availability services with 99%+ uptime targets Track record of incident response and on-call operations in production environments Technical Skills - GCP & Cloud Platforms Core GCP Services Compute : Deep expertise with Cloud Run (containerized workloads), Cloud Functions (serverless), Compute Engine Databases : Firestore (NoSQL), BigQuery (data warehouse), Cloud SQL (relational databases) Messaging & Streaming : Pub/Sub, Dataflow Storage : Cloud Storage (GCS), Firestore Backup & Point-in-Time Recovery (PITR) Networking : VPC, Cloud Load Balancer, Cloud Armor, VPN, Cloud Interconnect Security : Cloud IAM, Secret Manager, Cloud KMS, Security Command Center Monitoring & Observability : Cloud Monitoring, Cloud Logging, Cloud Trace, Profiler Deployment & Orchestration : Cloud Deploy, GKE (optional but valuable) Infrastructure-as-Code & Terraform Advanced Terraform proficiency: modules, variables, outputs, state management, remote backends Terraform best practices: version control, testing, CI/CD integration Terraform Cloud / Enterprise (optional, valuable for remote state management) Terraform testing frameworks: Terratest, checkov, terraform validate, tflint Policy-as-Code : OPA/Conftest or similar for infrastructure policy enforcement Hands-on experience managing 50+ cloud resources with Terraform Git workflow and code review processes for infrastructure code CI/CD & Deployment Automation GitHub Actions expertise (workflow design, custom actions, secrets management) GitHub Advanced Security : code scanning, dependency scanning, secret scanning Container technologies: Docker , container registries (Artifact Registry, Container Registry) Blue-green and canary deployment strategies Infrastructure-as-Code testing and validation in pipelines Automated rollback and disaster recovery procedures Monitoring deployment quality metrics Observability & Monitoring OpenTelemetry instrumentation and integration Google Cloud Monitoring and Cloud Logging Sentry for error tracking and alerting Dashboard design and visualization (Grafana, Cloud Monitoring dashboards) Alert design, incident triage, and escalation procedures Metrics collection, tracing, and debugging distributed systems Networking & Security VPC design, subnetting, routing, NAT/PAT Cloud Load Balancer and traffic management Cloud Armor (DDoS protection, WAF) VPN and encrypted communication IAM policy design and least-privilege access Secret management and credential rotation Network security auditing and compliance Disaster Recovery & Backup Backup strategy design (RTO/RPO planning) Firestore backup and point-in-time recovery GCS versioning and retention policies Infrastructure disaster recovery testing Runbook development and documentation PREFERRED QUALIFICATIONS Experience with Cloudflare (Workers, edge computing, WAF/DDoS) Kubernetes/GKE experience (container orchestration, Helm, operators) Experience with data pipelines (Dataflow, Cloud Composer/Airflow) Cost optimization expertise (RI analysis, committed use discounts, workload-based sizing) Experience with multi-region or multi-cloud deployments Background in platform engineering or building internal developer platforms (IDP) Exposure to governance and compliance (SOC 2, ISO 27001, GDPR) Experience with chaos engineering and resilience testing (Gremlin, Chaos Toolkit) Knowledge of API Gateway, Apigee or similar Experience with service mesh (Istio, Consul) - optional Terraform Cloud or Terraform Enterprise administration Linux/Unix system administration background