NetOps - Platform Engineer GCP

Project overview

Our client in the Banking and Finance sector is looking for a Data Platform Engineer GCP M/F

Mission Description:

Context

Working within a Google Cloud (GCP) Data Platform in a hybrid, multi-region environment, connected to an on-premise datacenter. The scope includes Cloud Interconnect, Network Connectivity Center (NCC), Internal Load Balancers (ILB L7), Serverless NEGs, Cloud Run, Cloud SQL, Private Cloud DNS, PingFederate (OIDC/SAML), Cloud Armor, Terraform, and GitLab CI.

The objectives are to secure the Data Platform flows by switching APIs and microservices to a network without public internet exposure, finalize the operational acceptance testing of the GCP-datacenter interconnection, migrate Kafka flows to the dedicated link, industrialize the network and security foundation with Terraform and GitLab CI, and implement centralized authentication in accordance with banking security standards.

Mission

The Data Platform Engineer will work on GCP hybrid network connectivity, private service deployment, access security, and infrastructure industrialization. They will also contribute to data flow migration and assist application teams with secure API interfacing.

Main Responsibilities

Technical Environment

Expected Deliverables

• Diagnose and resolve connectivity, routing, and firewall issues between corporate workstations and GCP internal Load Balancers.
• Connect Data VPCs Spokes to the central NCC hub and validate BGP routing.
• Deploy Internal Load Balancers L7 and Serverless NEGs connected to Cloud Run microservices.
• Implement DNS Peering with the central DNS hub and configure private Cloud DNS zones.
• Industrialize network and security infrastructures with reusable Terraform modules across Dev, Staging, Preprod, and Prod environments.
• Switch Kafka streaming flows to the dedicated Cloud Interconnect link.
• Configure Zero-Trust access policies with Cloud Armor, IAP, and PingFederate.
• Provision and secure private IP managed Cloud SQL databases, ensure isolation and compliance of KMS/CMEK encryption, and advise application teams on securing their APIs.
• Cloud and Network: Google Cloud (GCP), Cloud Interconnect, Network Connectivity Center (NCC), Cloud Router, BGP, VPC, Private Google Access
• Load Balancing and Services: Internal Load Balancer HTTP(S) L7, Proxy-only subnets, Serverless NEGs, Cloud Run, Direct VPC Egress
• Infrastructure and CI/CD: Terraform, GitLab CI
• DNS and Security: Cloud DNS, DNS Peering, Cloud Armor, Identity-Aware Proxy (IAP), PingFederate, OIDC/SAML, KMS/CMEK
• Data: Kafka, TLS/SASL, Cloud SQL, dbt
• Diagnostics: VPC Flow Logs, Cloud Logging, TCP packet analysis, routing tables, and firewalls
• Approved Technical Architecture Document (DAT) and formalized network flow opening matrix per environment.
• Technical acceptance testing document and validation report for Ingress/Egress connectivity.
• Documented Terraform module repositories and associated GitLab CI pipelines.
• Network and security troubleshooting runbooks.
• Formal skills transfer sessions to internal engineers of the Data Platform team.

Project details

• Start: flexible
• Remote: hybrid
• Location: 94220 Charenton-le-Pont, France, FR
• Rate: 72-72 EUR/h
• Languages: French