Staff Engineer - Cloud Infrastructure & Security

Design and evolve GCP-based infrastructure architecture for scalability, resilience, and security.

Define standards for:

Project and environment structure

Multi-region deployments

High availability and failover strategies

Lead architectural reviews for high-impact infrastructure changes.

Ensure infrastructure supports high-scale, multi-tenant SaaS workloads.

Architect and optimize Kubernetes (GKE) platforms for production workloads.

Define and enforce:

Cluster architecture and node pool strategies

Workload isolation and scheduling policies

Upgrade and lifecycle management strategies

Improve reliability, scalability, and operational efficiency of Kubernetes environments.

Design and manage secure and scalable cloud networking:

VPCs, subnets, routing, and firewalls

Load balancing and traffic routing

Own integration with Cloudflare, including:

CDN configuration

WAF rules and DDoS protection

Edge security and traffic management

Ensure low-latency, resilient, and secure traffic flows.

Design and enforce least-privilege IAM architecture across GCP and platform systems.

Define standards for:

Service accounts and roles

Access control policies

Just-in-time access and auditing

Partner with Cyber Security to continuously improve access posture and reduce risk.

Build and enforce secure-by-default infrastructure patterns.

Partner closely with Cyber Security teams to:

Identify and remediate vulnerabilities

Implement security controls and guardrails

Support threat modeling and risk assessments

Secure Kubernetes workloads, networking layers, and cloud services.

Drive adoption and quality of Infrastructure as Code (IaC) using tools like Terraform.

Build reusable infrastructure modules and automation frameworks.

Ensure infrastructure changes are Auditable, Repeatable & Safe

Reduce manual operational work through automation.

Design and improve disaster recovery (DR) and failover strategies.

Define and validate RTO / RPO objectives.

Partner with SRE teams to improve Incident response, System resilience & Operational readiness

Participate in postmortems and drive systemic improvements.

Identify infrastructure inefficiencies and performance bottlenecks.

Partner with FinOps and Cloud teams to:

Optimize resource utilization

Improve cost visibility and predictability

Balance performance, reliability, and cost in architectural decisions.

Act as a technical leader across Cloud Infrastructure and Security domains.

Mentor SDE2, SDE3, and Lead engineers.

Drive design reviews, architecture discussions, and best practices.

Influence teams across the organization without direct authority.

Work closely with:

Platform Engineering (CI/CD, DevEx)

SRE & InfraOps (operations and reliability)

Cyber Security teams (security and compliance)

Communicate complex technical concepts clearly to stakeholders and leadership.