Cloud Engineer

GCP Cloud Engineer
About the Role
A GCP Cloud Engineer is required to build and operate secure cloud foundations for enterprise Agentic AI platforms, including GEAP.
The role focuses on Google Cloud infrastructure, security, networking, Infrastructure as Code, and observability, ensuring that managed, self-hosted, and external agents can connect reliably while meeting enterprise identity, security, networking, and governance standards.
Contract Details
Contract Type: B2B cooperation. This opportunity is available only to candidates operating through their own s.r.o. (limited company).
Start Date: 16.11.2026 (an earlier start may be possible).
End Date: 31.12.2026, with the possibility of extension. The engagement is expected to continue for at least Q1 2027.
Work Setup: Remote-friendly. The role is primarily remote, with occasional office visits approximately once per month.
Key Responsibilities
The position involves managing GCP IAM and identity solutions, including service accounts, custom IAM roles, and Workload Identity Federation to establish secure trust relationships between GCP and non-GCP workloads without relying on long-lived credentials.
Responsibilities also include designing and supporting cloud networking capabilities such as VPC Service Controls, Private Service Connect, and cross-cloud connectivity patterns.
The successful candidate will use Terraform to provision Agent Platform resources, Agent Gateway instances, and network policies through Infrastructure as Code practices. The role also includes authoring and testing IAM and semantic governance policies, ideally following a policy-as-code approach.
A key part of the position is implementing and maintaining observability solutions using Cloud Trace, Cloud Logging, and Cloud Monitoring, including the development of dashboards and topology views across managed, self-hosted, and external agents.
Project Scope & Deliverables
The expected outcome is the delivery and operation of secure, automated, observable, and scalable GCP cloud foundations supporting GEAP and related enterprise Agentic AI platforms.
The environment must enable reliable connectivity for managed, self-hosted, and external agents while maintaining compliance with enterprise identity, networking, security, and governance requirements.
Required Experience and Skills
Strong experience with Google Cloud Platform (GCP), including cloud infrastructure, security, and networking.
Hands-on expertise with IAM, service accounts, custom roles, Workload Identity Federation, VPC Service Controls, and Private Service Connect.
Experience with Terraform and Infrastructure as Code methodologies.
Knowledge of policy-as-code approaches and governance policy authoring.
Experience with observability tooling, including Cloud Trace, Cloud Logging, and Cloud Monitoring.
Good understanding of Git and CI/CD practices.
Experience with cloud security and enterprise integration.
Strong analytical, documentation, communication, and collaboration skills.
Nice to Have
Experience working with enterprise Agentic AI platforms and related cloud foundations.

Work arrangement
Yes