Cloud & Infrastructure Engineer
Overview:
In this role, you will own and operate MX's Enterprise GCP Environment, ensuring a secure, scalable platform for internal apps and AI workloads. You'll implement self-serve tooling, guardrails, and guardrail-aligned CI/CD, partnering with IT Operations, Security, and Engineering to move ideas into production quickly and safely. You'll shape the network, identity, and reliability foundations that support MX's growth and governance needs. This is a hands-on platform engineering role with a strong emphasis on security, cost visibility, and cross-team collaboration.
Responsibilities:
- Build and operate the Enterprise GCP Environment with automated CI/CD to production under centralized controls
- Maintain curated GCP role catalog and org policy guardrails to simplify compliant paths
- Manage infrastructure as code (Terraform) for self-serve, disposable dev environments
- Design and operate platform network architecture (VPCs, zones, private connectivity, load balancing, DNS, egress controls)
- Implement and maintain identity and auth patterns (Okta/IAP); ensure least-privilege access
- Integrate code/dependency scanning (Snyk) into CI/CD pipelines
- Support SOC 2 / PCI audit evidence for platform and network controls
- Establish reliability practices (monitoring, alerting, runbooks, incident response)
- Coordinate cost attribution, tagging, budget alerts, and vendor/governance for cloud/AI spend
- Maintain architecture diagrams, runbooks, and documentation for the platform and networks
Key requirements:
- Bachelor's degree in Computer Science, Information Technology, or related field 6-8+ years in cloud, network, or infrastructure engineering with production GCP experience
- Deep hands-on experience with GCP (IAM, VPC, org policy, Cloud Run, GKE) or equivalent hyperscaler with fast ramp-upStrong network fundamentals (TCP/IP, DNS, load balancing, firewalls, VPN or zero-trust)
- Infrastructure-as-code experience (Terraform preferred) and CI/CD for infrastructure
- Identity and auth implementation (Okta, IAP, SSO/SAML/OAuth/OIDC)
- Monitoring, incident response, runbooks; scripting (Python, Bash, or Go)
- Security basics: least-privilege, data exfiltration controls, code & dependency scanning; SOC 2/PCI familiarity
- Excellent communication and collaboration skills
- Strong communication
- Collaborative mindset
- Clear documentation for mixed-technical audiencesGCP IAM, VPC networking, org policy, Cloud Run, GKETerraform; GitLab CI or GitHub Actions
- Okta, IAP; SSO/SAML/OAuth/OIDC; workload identity