DevOps Engineer GCP — Design, Deployment, and Automation of LZ

Project overview

For a major energy player

Mission Context

As part of the evolution and industrialization of its Cloud platform, the client is looking for three senior DevOps profiles capable of contributing to the design, deployment, and automation of infrastructure on Google Cloud Platform.

The consultants will be involved in the entire lifecycle of the Landing Zone components, from technical design to production deployment and knowledge transfer to internal teams.

The objective is to have GCP environments that are secure, resilient, observable, reproducible, and compliant with the client's architecture and operational standards.

Main Responsibilities

The consultants will notably be responsible for:

Expected Deliverables

The main deliverables may include:

Technical Skills Sought

The profile should have significant experience in:

Certifications

Mandatory certifications:

Recommended certification:

• designing and deploying GCP infrastructures that meet security, performance, availability, and cost control requirements;
• transforming technical needs into industrialized, reproducible, and maintainable solutions;
• developing and maintaining Terraform modules with the GCP provider;
• designing organizations, folders, projects, networks, subnets, and environment separation rules;
• implementing VPC architectures, peering, Cloud NAT, Cloud VPN, and interconnections with on-premise environments;
• deploying and securing IAM mechanisms, service accounts, and Workload Identity;
• integrating Cloud KMS, Secret Manager, Cloud Armor, Cloud IDS, and access control devices;
• industrializing deployments with GitLab CI, Cloud Build, and Artifact Registry;
• contributing to the implementation of Compute Engine, Cloud Run, Cloud Storage, Cloud SQL, BigQuery, and Firestore;
• integrating supervision, logging, traceability, backup, and restore mechanisms;
• considering resilience, high availability, and disaster recovery requirements;
• setting up budgets, alerts, labels, and cost allocation mechanisms;
• producing associated code, modules, pipelines, and documentation;
• participating in code reviews, architecture reviews, and PI Planning;
• ensuring skills transfer to operations and engineering teams.
• reusable and documented GCP Terraform modules;
• code repositories and CI/CD pipelines;
• technical architecture documents;
• configuration and deployment templates;
• operational and maintenance procedures;
• security flow and control matrices;
• backup, restore, and recovery procedures;
• supervision dashboards;
• cost and FinOps mechanism documentation;
• skills transfer materials.
• Google Cloud Platform;
• Terraform and IaC module design;
• GitLab CI and/or Cloud Build;
• GCP networking: VPC, Subnets, Peering, Cloud NAT, Cloud VPN;
• IAM, Service Accounts, and Workload Identity;
• Cloud KMS, Secret Manager, Cloud Armor, and Cloud IDS;
• Compute Engine and Cloud Run;
• Cloud Storage, Cloud SQL, BigQuery, and Firestore;
• Cloud Logging, Cloud Monitoring, Cloud Trace, and Error Reporting;
• Python and Bash;
• Active Directory / LDAP and hybrid DNS integration;
• bastions, jump hosts, and managed access;
• DevOps practices, Cloud security, and industrialization.
• Google Cloud Associate Cloud Engineer;
• HashiCorp Terraform Professional;
• Google Cloud Professional Cloud Architect.

Project details

• Start: flexible
• Remote: hybrid
• Location: 92000 Nanterre, France, FR
• Rate: 75-75 EUR/h
• Languages: French