GCP Network Engineer

Role summary

An L3 GCP Network Engineer is a senior engineer responsible for designing, implementing, and optimizing complex network architectures on GCP, and acting as the final escalation point for critical issues.

Key responsibilities

• Design and architect secure, highly available, and scalable GCP network topologies including multi‐VPC, hub‐and‐spoke, Shared VPC, hybrid and multi‐cloud connectivity.
• Lead implementation of advanced networking: Cloud Interconnect, Cloud VPN topologies, global and regional load balancing, Cloud Armor policies, Private Service Connect, VPC peering, custom route designs.
• Own end‐to‐end network security posture in GCP in partnership with security teams: firewall strategies, segmentation, zero‐trust patterns, DDoS protection, perimeter and egress controls.
• Serve as L3 escalation for complex production incidents, doing deep packet, routing, and performance analysis, and driving root cause analysis and long‐term fixes.
• Define standards, patterns, and best practices for GCP network designs, address planning, naming, tagging, and connectivity models.
• Drive automation and Infrastructure as Code for networking (Terraform, Deployment Manager, CI/CD for network changes, policy‐as‐code).
• Mentor L1/L2 engineers, review designs and changes, and provide training on GCP networking.
• Work with architects and stakeholders to align network designs with business, security, and compliance requirements (e.g., data residency, regulatory constraints).
• Evaluate new GCP networking features and third‐party solutions, build PoCs, and create adoption roadmaps.

Typical requirements

• 8+ years of network engineering with strong experience across routing, switching, firewalls, and large‐scale networks; substantial hands‐on GCP networking.
• Deep knowledge of routing protocols and enterprise networking concepts (BGP, OSPF/IGP, VRFs, MPLS or SD‐WAN concepts, VPN, QoS, high availability).
• Proven experience designing and operating production GCP networks (or equivalent cloud) at scale, including hybrid connectivity and multi‐region architectures.
• Strong experience with automation and IaC (Terraform, Ansible, pipelines) for network deployments.
• Certifications strongly preferred: Google Professional Cloud Network Engineer (and possibly Professional Cloud Architect), CCNP/CCIE or equivalent senior networking credentials