Sr GCP DevOps Engineer (USA)

US-Based Senior GCP DevOps Engineer Location: United States Employer: Kanda Software (www.kandasoft.com) Long term, full-time remote job Start: ASAP About the role We are seeking a US-based Senior GCP DevOps Engineer to help design, build, secure, and operate a Google Cloud Platform environment for an enterprise customer in the manufacturing and aerospace supply chain. This is a hands-on, client-facing role spanning technical discovery, cloud architecture, infrastructure automation, Linux hardening, and ongoing operations. You will collaborate with the company’s technical delivery, compliance, and security operations teams to build an enclave designed to support CMMC Level 2 requirements and alignment with NIST SP 800-171. The engagement includes environment implementation followed by 12 months of operations and security monitoring. The individual assignment duration and employment terms will be confirmed during the hiring process. Key responsibilities Discovery and GCP architecture Participate in technical discovery and blueprint workshops to define the enclave boundary, requirements, dependencies, and delivery responsibilities. Translate customer policies and existing architecture standards into an actionable GCP implementation plan. Design and implement organization, folder, and project structures, resource isolation, networking, shared services, and centralized logging. Provision and manage Compute Engine VMs, storage, load balancers, and other GCP services appropriate to the agreed architecture. Collaborate with customer engineers and the technical delivery lead to resolve design decisions and delivery roadblocks. Infrastructure automation and delivery Develop reusable, parameterized Terraform modules and repeatable infrastructure-as-code workflows. Implement Git-based CI/CD with peer reviews, Terraform plan validation, controlled deployment approvals, and traceable changes. Secure and manage Terraform state, including encryption, versioning, access controls, and change auditing. Automate post-provisioning configuration using Ansible, Puppet, or equivalent tooling. Prevent configuration drift and maintain consistent, reproducible environments. Security and compliance Build and maintain hardened Linux golden images using Packer or equivalent tooling, with particular attention to Red Hat Enterprise Linux. Implement least-privilege IAM, secure administrative access, service account controls, encryption, key management, and network restrictions. Work with compliance specialists to translate control requirements into technical configurations and evidence. Support vulnerability remediation, patching, certificate management, and secure image refresh processes. Help implement Google Security Operations (formerly Chronicle) and the required log ingestion, working with security specialists to enable SOC monitoring and detection. Produce architecture and implementation documentation that supports System Security Plan (SSP) development, audit readiness, and operational handoff. Operations and troubleshooting Establish monitoring, dashboards, alerting, and centralized operational and audit logging. Diagnose infrastructure, Linux, application, and performance issues using a structured, evidence-driven approach. Validate third-party engineering/design tools against OS versions and security configurations; coordinate troubleshooting with software vendors. Support workloads handling large design files, including capacity planning and infrastructure right-sizing. Conduct root cause analysis and implement corrective actions to prevent recurring incidents. Maintain operational runbooks and contribute to availability, recovery, and change-management practices. Required qualifications Substantial hands-on experience designing, provisioning, and operating production GCP environments. Strong Terraform expertise, including reusable modules, remote state management, and infrastructure delivery through CI/CD. Strong Linux administration and hardening skills, including Red Hat-based environments. Practical experience with GCP IAM, networking, organization policies, encryption, and secure access patterns. Experience building golden images and automating configuration management. Experience supporting regulated or security-sensitive environments, including control implementation, evidence collection, and technical documentation. Strong observability, incident troubleshooting, and root cause analysis skills. Ability to lead technical discussions with customers, explain architectural trade-offs, and collaborate with security, compliance, and delivery teams. Ability to work independently through discovery and implementation while maintaining clear documentation and communication. Based in the United States. Preferred qualifications Direct experience with Google Security Operations / Chronicle deployment or integration. Familiarity with CMMC Level 2, NIST SP 800-171, and SSP supporting documentation. Experience with GCP Assured Workloads, VPC Service Controls, Identity-Aware Proxy, and Cloud KMS / customer-managed encryption keys. Experience in FedRAMP, IL4, PCI, or similarly controlled environments. Experience with GKE/Kubernetes, managed instance groups, and rolling or blue-green deployment strategies. Experience supporting third-party engineering applications and resolving Linux package or OS compatibility issues. Experience with enterprise monitoring tools such as Splunk, Datadog, or AppDynamics.