Database Engineer

Key Responsibilities

• Deploy and manage standalone and clustered database systems CockroachDB, Apache Cassandra, Redis Sentinel, and MongoDB on GCP virtual machines, with clusters typically running as multi-node deployments
• Configure GCP firewall rules and GKE networking (pod IP ranges, NAT IP whitelisting) to enable secure connectivity between Kubernetes-hosted client applications and database VMs
• Implement and maintain RBAC-based authentication and authorization for database users, applying the principle of least privilege at every layer
• Enable and maintain TLS/SSL connections for database traffic, including managing a self-signed certificate PKI using OpenSSL
• Perform regular OS-level maintenance on database VMs, including patching and minor/major version upgrades, to reduce attack surface
• Plan and execute database-level major version upgrades and keep updated
• Write and run SQL queries to support RBAC administration and to extract data for the product team
• Troubleshoot database issues through log analysis and drive incidents to resolution
• Join team calls to respond to and resolve critical database incidents as they arise
• Automate operational and maintenance tasks using Bash scripting
• Maintain clear, current technical documentation in Markdown
• Collaborate with engineering, product, and other cross-functional teams as needed

Requirements

Required Qualifications

• 3-5+ years of experience as a Database Administrator or in a similar infrastructure engineering role
• Hands-on experience deploying and administering distributed/NoSQL and NewSQL databases such as Cassandra, MongoDB, CockroachDB, and Redis (Sentinel)
• Strong SQL skills, comfortable writing queries for administration and data retrieval
• Practical experience with GCP Compute Engine, VPC/firewall configuration, and GKE networking
• Solid Linux system administration skills, including OS patching and major-version upgrades
• Experience with Bash scripting for automation
• Working knowledge of RBAC and least-privilege security principles
• Experience enabling TLS/SSL and managing a certificate PKI (self-signed certs, OpenSSL)
• Ability to write clear technical documentation (Markdown)
• Willingness to join ad hoc incident calls to help resolve critical issues

Preferred Qualifications

• Familiarity with Kubernetes networking concepts beyond basic whitelisting
• Experience with infrastructure-as-code or configuration management tools
• Relevant cloud or database certifications

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.