Senior DevOps Engineer - Cloud Platform & Security (GCP)

emater

- Build the governed GCP foundation — project and environment structure, IAM with least privilege, service accounts, secret management, logging, monitoring and alerting, budgets and cost discipline. GCP (BigQuery, Cloud Run) is the company cloud; you make it governable - Migrate production workloads onto company cloud — including the AI agent runtime — off single-person and single-machine dependencies and legacy self-managed servers, without disrupting the live daily workflows the team depends on - Own cloud security — one accurate, current access map (no unknown admins), secrets handling, audit logging, network posture, backup and disaster recovery with tested restores, and incident-response basics the team can actually follow - Build the SDLC end to end — CI/CD on the company’s GitHub organizations, environment strategy (dev / staging / production), branch and release discipline, automated testing integration with QA, and AI-assisted code review in the pipeline. The team ships across four Shopify storefronts and internal services; you give them one disciplined way to do it - Stand up and operate the AI platform’s infrastructure — the containerized agent runtime, a self-hosted open-source agent memory service (Docker + PostgreSQL on GCP, with a managed Cloud SQL path), and, as the platform matures, a model gateway for per-agent cost attribution and budgets - Support the data platform’s operations — access, cost, and monitoring posture for the BigQuery warehouse, alongside the data engineer who owns its content - Document as you go — infrastructure as code as the primary documentation, plus runbooks the rest of the team can operate from

- 8+ years in DevOps / platform / infrastructure engineering, with production systems you built and operated yourself - Deep GCP experience — this is a must: IAM and access governance, Cloud Run (or equivalent container platforms), Secret Manager, Cloud Monitoring and Logging, cost management; BigQuery operations a strong plus - AWS experience as well — we run on GCP, but we want an engineer fluent in more than one cloud who chooses tools on merit - Cloud security depth: least-privilege design, secrets and key management, audit logging, network security, backup/DR. You treat security as an enabler designed in from day one — not a gate bolted on later - SDLC construction from scratch: you have built CI/CD pipelines, environment strategies, and release processes where none existed — and brought a team along with you - Infrastructure as code (Terraform or similar) and solid Linux administration — part of the current estate is hand-managed servers you will be retiring - Scripting fluency (Python and/or Bash) and comfort with Docker and containerized workloads - Working proficiency in English. Knowledge of Armenian is a bonus. (The engineering team is Armenian-speaking - Documentation and company leadership work in English) - A bonus, not a requirement: exposure to LLM/AI platforms or agent infrastructure, e-commerce or Shopify context, workflow tools (n8n), Looker

Apply here https://emater.bamboohr.com/careers/114?source=aWQ9Mjc%3D Please mention in your application that you have learned about this position from MyJob.am