Cloud Engineer

Position Overview

The GCP Cloud Engineer accelerates project delivery by implementing enterprise-grade cloud designs and automation standards established by the Cloud Architecture and Operations teams. Operating within a DevOps methodology, you will serve as the primary infrastructure lead on cloud migration and modernization projects-provisioning application hosting environments, building robust monitoring, and ensuring high availability.

Beyond deployment, you will author, socialize, and govern the standards for how the organization consumes cloud services. We are looking for a continuous-improvement champion who will drive lifecycle management, evaluate evolving GCP capabilities, manage vendor interactions, and participate in after-hours on-call rotation.

Note: Due to the nature of our work unit (OIT), the selected candidate must successfully pass comprehensive background checks, including State, Federal, and Criminal Justice Information Services (CJIS) clearances.

Some of the primary duties and responsibilities include:

Infrastructure as Code: Deploy and manage GCP infrastructure natively as code (IaC) utilizing Terraform integrated into automated CI/CD pipelines.

Standardization: Define, document, and govern Standard Operating Procedures (SOPs) for the secure consumption of IaaS, PaaS, and SaaS across GCP.

Core Networking: Configure and deploy highly available VPC environments, Shared VPCs, and cloud compute instances across all hosted enterprise workloads.

Security Automation: Partner with Network Security Operations (NetSecOps) and the CISO team to embed identity, governance, and network security policies directly into automated, reusable infrastructure templates.

Identity & Access: Manage cloud-platform users, organizations, groups, and access controls in strict alignment with IAM team requirements.

Observability: Design and implement comprehensive monitoring, logging, and reporting capabilities to ensure platform health and management visibility.

Innovation & Advocacy: Analyze emerging GCP features for platform adoption and evangelize cloud capabilities to internal teams to drive migration.

Tier-2 Support: Act as the escalation point for on-call/break-fix efforts to rapidly diagnose and resolve complex incidents within cloud-based systems.

On-Call Operations: Participate in a rotating 24/7/365 after-hours on-call schedule to provide Tier-2 engineering support, system monitoring, and rapid incident response for production environments.

MINIMUM QUALIFICATIONS:

At least five (5) years of infrastructure development experience with hands-on experience with GCP foundation services related to computing, network, storage, content delivery, administration and security, deployment and management, and automation technologies.

At least five (5) years of Infrastructure as Code (IaC) experience in Terraform or similar.

Deep domain expertise in cloud infrastructure solutions (i.e. Windows and Linux IaaS, Business Continuity and Disaster Recovery, Security, Management, Storage, Networking, OSS, containers, and Infrastructure as code technology), breadth of technical experience, and technical aptitude to learn and adjust to new technologies and cloud trends required.

Proven technical breadth and the aptitude to adapt to rapidly changing cloud trends

Demonstrated experience with large-scale infrastructure deployments in enterprise-wide environments.

Hands-on experience building and maintaining automated Continuous Integration/Continuous Delivery (CI/CD) pipelines.

Strong scripting capabilities in Bash, Python, YAML, and PowerShell.

PREFERRED QUALIFICATIONS:

Google Cloud Professional Cloud Architect certification

Google Cloud Associate Cloud Engineer

Hands-on experience deploying infrastructure via Azure DevOps, GitHub Actions, GitLab CI, or similar enterprise CI/CD platforms

Candidate must be local or willing to commute or relocate.

Candidate Must Be Local

Additional Location Details (City, State) :

Must be local from anywhere within the state of Colorado.

Information on Security Training

NOTICE: If you are hired as vendor staff who will have access to state systems or data or as a contractor for one of the state executive branch consolidated agencies, in adherence to Colorado Revised Statute 24-37.5-401, 403, 404, 405, and 406, and Colorado Information Security Policy (CISP) 002, you will be required to self-register and complete information security training, including but not limited to review and acknowledgement of the Acceptable Use of State Data and IT Resource Policy (AUP) (CISP-018), through the consolidated agency contractor information security training site within 30 days of your contract start date and annually thereafter. Should you be awarded this contract, the state agency will provide the contractor information security training site information to you.

Minimum Verification Requirements

Please complete the following verifications with Info Cubic upon candidate's selection. Additional verifications may be identified by the agency.

• State Criminal Record verification (past 7 years covering each State in which the candidate has resided)

• County Criminal Records (past 7 Year Address History)

• Federal Criminal Records Verification (past 7 years)

• SSN Name Search

• Global Monitor Check (formerly Patriot/OFAC/Terrorist)

(Suppliers Only)
To order, click on the link to the right:

Order the OIT Background Verification

Qualification Required