Staff Infrastructure Engineer – GCP

• Design, document, build and maintain scalable infrastructure on GCP
• Ensure performance and reliability of cloud environments while measuring cost-effectiveness
• Embrace automation and minimize manual implementation
• Build systems with security by design
• Ensure platform compliance with ISO 27001, SOC 2, PCI DSS and 3DS
• Design and operate GCP key and secret management, including support for cryptographic key ceremonies
• Rapidly diagnose and fix client-reported infrastructure issues while maintaining security and performance
• Write technical documentation and host training sessions
• Demonstrate knowledge of new technologies and industry changes
• Lead complex infrastructure projects from inception through to run
• Shape Engine's approach, tooling, automation and architecture
• Lead by example and set a high technical bar
• Help deliver new features across the engineering organization

Requirements

• Proven GCP multi-region disaster recovery experience
• Confident bootstrapping Google Cloud Organisations, hardening with policies, and structuring an enterprise's resource hierarchy
• Experience with GCP services including GKE, Compute Engine, Network Connectivity Center, Cloud SQL, IAM and VPC Service Controls
• Experience writing clean, modular Terraform code
• Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure
• Experience with GCP key and secret management using Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager, including cryptographic key ceremonies
• Experience designing hybrid connectivity from GCP to co-located Payment HSMs using NCC, Cloud VPN and Dedicated / Partner Interconnect
• Experience with Workload Identity and Workload Identity Federation for keyless workload and CI/CD authentication
• Experience with observability tooling including Cloud Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus, OpenTelemetry and Grafana
• Experience setting up Google Workspace / Google Cloud Identity
• Experience with automation using Python or Go
• Experience implementing CI/CD pipelines
• Understanding of RESTful API and event-driven concepts
• Comfortable writing RFCs and ADRs through design, implementation and production, with documented runbooks and operating models
• Ideally, experience with Zero Trust security, including mTLS and SSO
• Ideally, experience with AWS
• Ideally, comfortable with bash and either Golang, Java or Python development
• Ideally, understanding of database monitoring, analysis, disaster recovery and performance tuning
• Ideally, understanding of networking and routing concepts including TCP/IP, VLANs, VPNs and BGP
• Awareness/ability to leverage Claude Skills during development
• No specific educational qualification required; hiring emphasizes aptitude and attitude

Core Competencies

Demonstrates expertise in designing and maintaining scalable infrastructure on GCP, with a strong focus on security, compliance, and automation. Proficient in managing GCP services, implementing CI/CD pipelines, and utilizing observability tools to ensure performance and reliability.

Highest-signal resume keywords

• GCP Multi-Region Disaster Recovery
• Terraform Code Development
• GCP Key And Secret Management
• CI/CD Pipeline Implementation
• Observability Tooling Experience

Hard Skills

• GCP Services
• Terraform
• Python
• Go
• Cloud Monitoring
• Cloud Logging
• Cloud Trace
• Cloud SQL
• Network Connectivity Center
• Service-Oriented Architecture

Soft Skills

• Technical Documentation
• Training Facilitation
• Problem-Solving
• Leadership

Certifications & Qualifications

• ISO 27001
• SOC 2
• PCI DSS

Industry Keywords

• Zero Trust Security
• MTLS
• SSO
• Disaster Recovery
• Networking Concepts

Tools & Technologies

• Google Workspace
• Cloud KMS
• Cloud VPN
• Dedicated Interconnect
• Grafana
• OpenTelemetry