Maintaining, validating, and implementing existing Terraform infrastructure
Hybrid GCP connectivity
Troubleshooting, security, and onboarding
Working within established landing zones and templates
There is minimal greenfield design and little to no application development.
What the Engineer WILL Be Doing
Core Responsibilities
Terraform work (primary skill)
Review existing Terraform code
Implement changes based on findings
Validate infra standards with GCP SMEs
Apply updates (not large redesigns)
DevOps / Platform Enablement
CI/CD pipelines (GitLab)
Confluence documentation
Supporting internal BNY developers using GCP
Hybrid GCP Support
VPCs, IP addressing
DNS
Gateways & firewalls (configuration, not design)
On-prem connectivity (working with on-prem teams, not owning on-prem)
Landing Zones & Onboarding
Provision landing zones from templates
Onboard new internal customers
Support storefront-based access
Security & Troubleshooting
Partner with data security teams
Address vulnerabilities
Troubleshoot logs, firewall issues, access problems
Skill Emphasis (Updated Must-Haves)
Must-Have
GCP (Hybrid environment)
Terraform (hands-on, production)
DevOps experience
CI/CD (GitLab)
Networking fundamentals (VPC, IPs, DNS, firewalls)
Troubleshooting & security mindset
Experience working in existing enterprise cloud environments
Nice-to-Have
Exposure to Azure or AWS
Kubernetes familiarity (supporting infra side)
Security / vulnerability remediation experience
Financial services / regulated environments
Ideal Backgrounds
GCP Platform Engineers
DevOps Engineers (Terraform-heavy)
Cloud Infrastructure Engineers
SREs with strong IaC
Engineers from large enterprise / regulated environments
