• Design, build, and maintain cloud infrastructure in GCP (VPC, GKE Autopilot/Standard, Cloud SQL, AlloyDB, Memorystore, Cloud Storage, Cloud Run, Artifact Registry, Cloud NAT, Cloud Armor, etc.) • Manage hybrid environments (remaining on-prem + GCP) • Deploy and operate production-grade Kubernetes clusters (GKE + on-prem k8s) • Manage all infrastructure as code using Terraform (mandatory) + Helm + Kustomize • Configuration management with Ansible (existing playbooks) while evolving to more modern practices • Ensure high availability and disaster recovery for databases and queues (Cloud SQL, AlloyDB, Memorystore Redis, managed Kafka/RabbitMQ, Elasticsearch/OpenSearch on GKE) • Build a modern observability stack: Prometheus + Grafana + Loki/Tempo + OpenTelemetry , integrated with Cloud Monitoring and Cloud Logging • Design and implement CI/CD pipelines (GitLab CI, GitHub Actions, Cloud Build) • Participate in security & compliance processes (IAM, KMS, Secret Manager, VPC Service Controls, Security Command Center, hardening) • Join the on-call rotation (we are building an SRE culture) • Mentor mid/junior engineers and participate in architecture reviews