DevOps/Cloud Engineer

Employment Type Full time; Monday-Friday, 8 am-5pm (every other Friday off)Must be a resident of the state of Idaho or UtahTo apply, send resumes to hr@bestnotes.comVisit Bestnotes.com to learn about our organization.Reports To: CTOJob Description: DevOps / Cloud EngineerPosition SummaryWe are seeking a skilled DevOps / Systems Administrator to help maintain, secure, and evolveour cloud infrastructure in Google Cloud Platform (GCP). This role supports two coreapplication environments:This position is responsible for infrastructure reliability, security, performance, operationalmaturity, and effective collaboration with internal development teams and external infrastructureservice partners. The ideal candidate is comfortable working across traditional VM-basedenvironments and modern containerized cloud-native systems, with a strong security mindsetand a practical approach to availability, maintainability, and continuous improvement.Key ResponsibilitiesCloud Infrastructure and OperationsSecurity and ComplianceLegacy platform: PHP application running on virtual machines with Apache and MySQLModern platform: JavaScript / FHIR-based application using PostgreSQL and KubernetesAdminister, maintain, and improve GCP-based infrastructure for both legacy and modernapplication stacksManage compute, networking, storage, IAM, secrets, logging, monitoring, backup, anddisaster recovery capabilitiesMaintain and optimize VM-based application environments, including Apache, PHP, MySQL,Linux systems, and supporting servicesSupport and operate Kubernetes-based environments for modern applications, includingcluster health, deployments, scaling, ingress, observability, and platform stabilityMaintain CI/CD and operational workflows that support reliable application delivery acrossenvironmentsMonitor system health, performance, availability, and capacity, and proactively address risksand bottlenecksParticipate in incident response, root cause analysis, and remediation planningHelp design, implement, and enforce security best practices across infrastructure,platforms, and operational processesCollaboration and Platform SupportRequired QualificationsHarden systems and services, manage patching processes, and reduce infrastructure riskexposureMaintain secure IAM, access controls, secrets handling, certificate management, andnetwork segmentationPartner with development teams and service providers to improve secure deploymentpatterns and operational controlsSupport audit, compliance, vulnerability remediation, logging, and evidence-gatheringprocesses as neededContinuously evaluate infrastructure and application architecture for security improvementsWork closely with software development teams to support application delivery,troubleshooting, performance, and operational readinessServe as a bridge between engineering, operations, security, and external infrastructurepartnersCoordinate with third-party service providers, cloud partners, and infrastructure vendors onimplementation, troubleshooting, and operational improvementsContribute to infrastructure standards, documentation, runbooks, and operational processesHelp guide architecture decisions with a focus on reliability, security, scalability, andsupportabilityStrong hands-on experience administering production systems in Google Cloud PlatformExperience supporting Linux-based web application environmentsStrong experience with one or more of the following:Apache / PHP / MySQL on VMsKubernetes-based application platformsPostgreSQL administration in application environmentsExperience with cloud networking, firewalls, IAM, service accounts, DNS, TLS/certificates,load balancing, and backup/recoveryStrong understanding of infrastructure security principles and operational hardeningExperience with monitoring, logging, alerting, and incident responseExperience working directly with software engineers and technical vendors / servicepartnersStrong troubleshooting, documentation, and communication skillsThis description is intended to describe the general nature and level of work being performed. It is not an exhaustive list of all duties, responsibilities, and requirements. Other functions may be assigned, and management retains the right to add to or change the duties and responsibilities at any time.