| Job Description: |
We are seeking a GCP Full Stack Engineer with strong hands-on experience in C#/.NET, Python, Angular (v8), and TypeScript/JavaScript to build and sustain cloud-native applications on Google Cloud Platform (GCP). The ideal candidate will have proven expertise with GKE, modern DevOps practices (IaC + CI/CD), and security-first engineering including encryption, authN/authZ, secure SDLC, and supply-chain controls (Binary Authorization) Good to have: Prior experience contributing to GCP → Azure migration initiatives as part of modernization or platform transition programs Key Responsibilities Full Stack Engineering (Backend + Frontend) - Design, develop, and maintain backend services using C#/.NET and Python.
- Build and maintain responsive web UIs using Angular 8 and TypeScript/JavaScript.
- Work with relational databases and queries using SQL (MySQL); optimize data access patterns and performance.
Google Cloud Platform (GCP) - Build, maintain and operate workloads on GCP, including:
- GKE (Google Kubernetes Engine) for container orchestration and cluster operations.
- Cloud SQL and BigQuery for transactional and analytical workloads.
- Pub/Sub for event-driven messaging and distributed processing.
- Cloud Functions for serverless integrations and automation
- Cloud Storage for object storage patterns.
- Secret Manager, IAM, KMS, DLP for secure configuration, access control, encryption, and data protection.
DevOps, IaC, CI/CD, and Observability - Containerize applications using Docker and deploy on GKE.
- Automate infrastructure provisioning using Terraform, and manage Kubernetes deployments with Helm.
- Build and maintain CI/CD pipelines using GitHub Actions (and/or equivalent build systems).
- Implement and maintain logging and monitoring using Elastic Search, Splunk and Grafana; integrate with GCP Monitoring/Logging to improve operational visibility.
- Track work and delivery using Jira.
Security Engineering (First-Class Requirement) - Implement and maintain encryption and data protection mechanisms using Tink encryption and KMS.
- Build and maintain secure authentication/authorization patterns using OAuth2/JWT, integrate with Okta, and enforce RBAC/LDAP aligned access controls.
- Follow Secure Development Lifecycle (SDL) practices and perform CVE management (dependency scanning, patching, remediation).
- Enforce container and deployment security using Binary Authorization (policy-based image deploy controls).
Required Skills Programming & Full Stack - C#/.NET (backend service development) , Python (services, automation, tooling) , Angular 8, TypeScript/JavaScript
- SQL (MySQL) (queries, schema design, performance tuning)
Cloud (GCP) - Hands-on experience with GKE, Cloud SQL, BigQuery, Pub/Sub, Cloud Functions, Cloud Storage
- Strong understanding of Secret Manager, IAM, KMS, DLP, and cloud security fundamentals
- Familiarity with Monitoring/Logging/Build capabilities on GCP
DevOps & Observability - Docker, Terraform, Helm, GitHub Actions CI/CD
- Splunk, Grafana for logs/metrics/dashboards
- Jira for agile execution
Security (Must-Have) - Tink encryption, OAuth2/JWT, Okta, RBAC/LDAP
- SDL, CVE management, dependency hygiene
- Binary Authorization for container supply chain enforcement
|
