Title: GCP Devops Engineer (Contract-to-Hire)
Only GC/ USC basically people who can convert without sponsorship
Verified Linkedinn required
Visa - USC, GC EAD, H4 EAD
Locations: Houston, TX; Mayfield Heights, OH; Milwaukee, WI
Team: IT Platform Engineering, Infrastructure & Operations
Role summary We are bringing Google Cloud Platform into our enterprise-supported cloud environment alongside our existing Azure platform. This contract-to-hire engineer will build and harden an enterprise-ready GCP landing zone and help evolve our current tenant from experimentation into a governed, production-grade platform. The role partners closely with identity, security, FinOps and AI Governance teams.
Key responsibilities
- Design and deploy an enterprise landing zone covering organization, folder, and project structure, IAM, connectivity, logging, and security integrations, aligned to landing zone best practices.
- Migrate unmanaged Google accounts to managed identities and implement Entra-to-Google identity sync with full SSO and MFA.
- Consolidate projects into a single billing account to enable FinOps invoicing and chargeback.
- Establish network guardrails including public IP blocking policies, centralized VPCs and hub architecture, and private access and endpoints.
- Centralize audit logging and monitoring and integrate enterprise security tooling such as Wiz and CrowdStrike.
- Implement platform components as code (Terraform) with reusable, secure, policy-enforced modules.
- Document standards and operational runbooks to support handoff to platform and cloud operations teams.
Required qualifications
- Hands-on GCP platform engineering experience, including Cloud Identity, IAM, org policy, VPC networking, and billing administration.
- Identity federation experience with Microsoft Entra ID, SSO, and MFA.
- Infrastructure as code proficiency with Terraform.
- Working knowledge of cloud security posture management and log and monitoring centralization.
- Experience taking a cloud environment from POC to enterprise-governed state.
Preferred
- Experience operating a second cloud (Azure) at enterprise scale.
- FinOps and chargeback model experience.
- Familiarity with Wiz, CrowdStrike, and manufacturing or regulated enterprise environments.