Job Description
Job Description Role summary
An L3 GCP Network Engineer is a senior engineer responsible for designing, implementing, and optimizing complex network architectures on GCP, and acting as the final escalation point for critical issues.
Key responsibilities
- Design and architect secure, highly available, and scalable GCP network topologies including multi VPC, hub and spoke, Shared VPC, hybrid and multi cloud connectivity.
- Lead implementation of advanced networking: Cloud Interconnect, Cloud VPN topologies, global and regional load balancing, Cloud Armor policies, Private Service Connect, VPC peering, custom route designs.
- Own end to end network security posture in GCP in partnership with security teams: firewall strategies, segmentation, zero trust patterns, DDoS protection, perimeter and egress controls.
- Serve as L3 escalation for complex production incidents, doing deep packet, routing, and performance analysis, and driving root cause analysis and long term fixes.
- Define standards, patterns, and best practices for GCP network designs, address planning, naming, tagging, and connectivity models.
- Drive automation and Infrastructure as Code for networking (Terraform, Deployment Manager, CI/CD for network changes, policy as code).
- Mentor L1/L2 engineers, review designs and changes, and provide training on GCP networking.
- Work with architects and stakeholders to align network designs with business, security, and compliance requirements (e.g., data residency, regulatory constraints).
- Evaluate new GCP networking features and third party solutions, build PoCs, and create adoption roadmaps.
Typical requirements
- 8 years of network engineering with strong experience across routing, switching, firewalls, and large scale networks; substantial hands on GCP networking.
- Deep knowledge of routing protocols and enterprise networking concepts (BGP, OSPF/IGP, VRFs, MPLS or SD WAN concepts, VPN, QoS, high availability).
- Proven experience designing and operating production GCP networks (or equivalent cloud) at scale, including hybrid connectivity and multi region architectures.
- Strong experience with automation and IaC (Terraform, Ansible, pipelines) for network deployments.
- Certifications strongly preferred: Google Professional Cloud Network Engineer (and possibly Professional Cloud Architect), CCNP/CCIE or equivalent senior networking credentials