Cloud Engineer

The GCP Cloud Engineer is responsible for implementing the designs and standards provided by the Cloud Architect and established by the Cloud Operations team as a whole and deploying application hosting environments using repeatable templates/tools/processes, with a primary focus on the GCP cloud platform within a DevOps structured team and methodology. Additionally, based on guidance by the Cloud Architect, configurations, automation, and tools that will allow cloud services to be consumed in an efficient manner should be established. Ultimately, the Cloud Engineer is the primary resource assigned to projects targeted for cloud deployment. They are responsible for provisioning the application hosting environments and associated monitoring and reporting to accomplish project objectives while acting as the primary infrastructure point of contact on such projects.

They are also responsible for crafting, publishing, socializing, and overseeing adherence to the standards they establish and modifying them to achieve the strategic goals of OIT, and the tactical needs of the applications deployed to the cloud. In addition, they will drive continuous improvement within the CloudOps team, as well as lifecycle management and exploration into evolving cloud-based solutions. They handle the day-to-day interactions with vendors partnered with to help meet work unit and organizational objectives. The engineer will be required to participate in a weekly after-hours on-call rotation. While on call, the Engineer will need to be available to assist in troubleshooting or resolve any production break-fix issues after hours. Individuals selected for this position will also need to complete agency background checks, which may include but not be limited to Criminal Justice Information and State and Federal background checks.

Some of the primary duties and responsibilities include:

Configure and deploy VPC environments and cloud instances as designed by the Cloud Architect to meet the needs across all hosted workloads

Evaluate and collaborate with NetSecOps team to establish security controls necessary to meet policy and standards from the CISO, ideally in a templated and automated manner

Analyze and recommend new GCP capabilities for consideration for adoption

Manage users/orgs/groups/access within the cloud platform, based on requirements defined by IAM team

Create monitoring and reporting capabilities to meet management needs of cloud platform

Define and document standards and procedures (SOPs) for consumption of IaaS (via IaC), PaaS, and SaaS on GCP

Communicate/advocate capabilities of the cloud platform to drive adoption

Act as Tier-2 escalation point for on-call/break-fix efforts, to diagnose and resolve incidents and problems with cloud-based systems

Work with NetSecOps resources to ensure network security policy is established in a consistent, repeatable and automated manner

MINIMUM QUALIFICATIONS:

At least five (5) years of infrastructure development experience with hands-on experience with GCP foundation services related to computing, network, storage, content delivery, administration and security, deployment and management, and automation technologies.

At least five (5) years of Infrastructure as Code (IaC) experience in Terraform or similar.

Deep domain expertise in cloud infrastructure solutions (i.e. Windows and Linux IaaS, Business Continuity and Disaster Recovery, Security, Management, Storage, Networking, OSS, containers, and Infrastructure as code technology), breadth of technical experience, and technical aptitude to learn and adjust to new technologies and cloud trends required.

Experience and understanding of large-scale infrastructure deployments in enterprise-wide environments are required.

Experience with automated Continuous Integration/Delivery

Scripting skills in Python, Bash, and PowerShell

Google Foundational certification

PREFERRED QUALIFICATIONS:

Professional Cloud Architect certification

Experience with Terraform

Experience with Azure DevOps

Candidate must be local or willing to commute or relocate.

Additional Location Details (City, State) :

Candidate must be local or willing to relocate within Colorado before starting in this position.

Information on Security Training

NOTICE: If you are hired as vendor staff who will have access to state systems or data or as a contractor for one of the state executive branch consolidated agencies, in adherence to Colorado Revised Statute 24-37.5-401, 403, 404, 405, and 406, and Colorado Information Security Policy (CISP) 002, you will be required to self-register and complete information security training, including but not limited to review and acknowledgement of the Acceptable Use of State Data and IT Resource Policy (AUP) (CISP-018), through the consolidated agency contractor information security training site within 30 days of your contract start date and annually thereafter. Should you be awarded this contract, the state agency will provide the contractor information security training site information to you.

Minimum Verification Requirements

Please complete the following verifications with Info Cubic upon candidate's selection. Additional verifications may be identified by the agency.

• State Criminal Record verification (past 7 years covering each State in which the candidate has resided)

• County Criminal Records (past 7 Year Address History)

• Federal Criminal Records Verification (past 7 years)

• SSN Name Search

• Global Monitor Check (formerly Patriot/OFAC/Terrorist)

(Suppliers Only)
To order, click on the link to the right:

Order the OIT Background Verification