GCP Infra Admin

Job Title: GCP Infrastructure Administrator 
Experience: 4–8 years overall, including at least 3 years of hands-on GCP experience 
Support Model: Production support with rotational on-call, where required 

Role Summary 

We are seeking an experienced GCP Infrastructure Administrator to provision, administer, monitor and support secure and highly available infrastructure on Google Cloud Platform. 

The engineer will manage day-to-day GCP operations, automate infrastructure provisioning, troubleshoot production issues, maintain security and governance controls, and collaborate with application, DevOps, networking, security and architecture teams. 

Key Responsibilities 

• Provision, configure and administer GCP projects and infrastructure across development, testing and production environments. 

• Manage Compute Engine instances, instance groups, images, snapshots, disks and OS configurations. 

• Administer VPC networks, subnets, routes, firewall rules, Cloud NAT, Cloud DNS, load balancers and Private Google Access. 

• Support hybrid connectivity using Cloud VPN, Cloud Interconnect and dynamic routing with Cloud Router/BGP. 

• Manage Cloud IAM roles, groups, service accounts, workload identities and privileged-access controls. 

• Apply least-privilege access and periodically review excessive, unused or outdated permissions. 

• Manage organization, folders, projects, billing accounts, quotas, APIs, labels and resource hierarchy. 

• Implement organization policies and standardized project configurations. 

• Provision and maintain infrastructure using Terraform and reusable Infrastructure-as-Code modules. 

• Use gcloud, Cloud Shell and automation scripts for administration and operational activities. 

• Administer GKE clusters, node pools, namespaces, workload identity, ingress, upgrades and basic Kubernetes troubleshooting. 

• Support Cloud Run and other serverless workloads where they form part of the platform. 

• Manage Cloud Storage buckets, lifecycle policies, encryption, retention policies and access controls. 

• Provide infrastructure-level support for Cloud SQL and other managed database services, including connectivity, backup and availability. 

• Configure Cloud Monitoring dashboards, alerting policies, uptime checks, log-based metrics and notification channels. 

• Use Cloud Logging, Audit Logs and Error Reporting to investigate infrastructure and application incidents. 

• Respond to alerts, incidents and service requests within defined SLA targets. 

• Perform technical troubleshooting, root-cause analysis and corrective/preventive actions. 

• Plan and execute patching, upgrades, maintenance and vulnerability-remediation activities. 

• Maintain backups, snapshots, disaster-recovery procedures, recovery documentation and DR-test evidence. 

• Implement security controls including IAM, firewall policies, encryption with Cloud KMS/CMEK, Secret Manager and audit logging. 

• Support VPC Service Controls, Security Command Center and Cloud Armor where applicable. 

• Monitor cloud spending, prepare cost reports and identify idle or oversized resources. 

• Recommend rightsizing, committed-use discounts, storage lifecycle rules and resource-cleanup opportunities. 

• Follow ITIL processes for incident, problem, change, release and service-request management. 

• Participate in change reviews, deployment planning and production-readiness assessments. 

• Maintain architecture diagrams, configuration documents, SOPs, runbooks and operational checklists. 

• Collaborate with application, DevOps, database, security, network and enterprise architecture teams. 

• Participate in rotational on-call support and major-incident bridges when required. 

Mandatory Technical Skills 

• Strong hands-on administration experience with Google Cloud Platform. 

• Compute Engine, managed instance groups and persistent disks. 

• VPC, firewall rules, routes, Cloud NAT, Cloud DNS and load balancing. 

• IAM, service accounts, custom roles and organization policies. 

• Cloud Storage and related security/lifecycle configuration. 

• Cloud Logging, Cloud Monitoring and Audit Logs. 

• Terraform and Infrastructure as Code. 

• gcloud CLI and Cloud Shell. 

• Linux administration and troubleshooting. 

• Shell scripting or Python automation. 

• Git and CI/CD fundamentals. 

• Understanding of backup, high availability and disaster recovery. 

• Strong incident troubleshooting and root-cause-analysis skills. 

Preferred Skills 

• Google Kubernetes Engine and Kubernetes administration. 

• Cloud Run and serverless infrastructure. 

• Cloud SQL, BigQuery or other managed GCP services. 

• Shared VPC and centralized network architecture. 

• Compute Engine 

• Cloud VPN, Interconnect and hybrid-cloud networking. 

• Cloud Armor, Security Command Center and VPC Service Controls. 

• Secret Manager and Cloud KMS. 

• Ansible or other configuration-management tools. 

• Jenkins, GitHub Actions, GitLab CI or Cloud Build. 

• ServiceNow or a comparable ITSM platform. 

• Exposure to Azure or AWS. 

• FinOps and cloud-cost-optimization experience.