GCP Cloud Engineer
At a glance
Mid-level Cloud role at Nexer Group. Prague.
Pay not stated Cloud salary
devopsroles summary, based on the employer's posting.
What you'll do
- Build and maintain secure GCP environments for managed, self-hosted and external AI agents
- Set up GCP identities and access, including service accounts, custom roles and federated workload trust
- Use Terraform to provision Agent Platform resources, Agent Gateway instances and network policies
- Configure private networking and cross-cloud links, then write and test IAM and governance policies
- Create Cloud Trace, Logging and Monitoring dashboards that show agent activity and topology
What you bring
- You are based in Czechia and have English at B2 level or above
- You bring hands-on GCP, IAM, networking and Terraform knowledge
- You understand policy-as-code and observability, with Git and CI/CD knowledge
- You have experience with cloud security and enterprise integrations
Who this fits
This role suits a cloud engineer focused on GCP infrastructure, security and observability, with analytical, documentation and collaboration skills. The position is fully remote, with an optional onsite visit about once a month and occasional travel as needed. It is full-time under a Czech employment contract.
From the employer
About Us
Nexer Czech Republic is a division within DANIR AB, an IT consulting and R&D company. We have the opportunity to work with world-renowned brands from Scandinavia, the USA, the UK, and Western Europe. Our goal is to grow strong, focusing on competencies rather than numbers.
The Project and the Role Description
At Nexer Czech Republic, we are looking for a GCP Cloud Engineer to join an international project focused on building and operating secure cloud foundations for enterprise Agentic AI platforms.
The role is centered around Google Cloud Platform infrastructure, security, networking, Infrastructure as Code, and observability. You will help design, build, and maintain scalable and secure cloud environments that support managed, self-hosted, and external AI agents while meeting enterprise security and governance requirements.n.
Tasks
GCP IAM & Identity: Service accounts, custom IAM roles, and Workload Identity Federation to extend trust from GCP to non-GCP workloads without long-lived keys.
Cloud Networking: VPC Service Controls, Private Service Connect, and cross-cloud connectivity patterns used within the DHL network.
Infrastructure as Code: Terraform for provisioning Agent Platform resources, Agent Gateway instances, and network policies as code.
Policy Authoring: Writing and testing IAM and semantic governance policies, ideally using a policy-as-code approach.
Observability Tooling: Cloud Trace, Cloud Logging, and Cloud Monitoring, including building dashboards and topology views spanning managed, self-hosted, and external agents.
Required Skills
Based in Czechia
Good level of English language (min.B2, C1 preffered)
GCP (Google Cloud Platform)
IAM (Identity and Access Management
Networking
Terraform
Policy-as-code
Observability
Git, and CI/CD knowledge.
Experience with cloud security and enterprise integration.
Analytical, documentation, communication, and collaboration skills.
Assignment Details
Employment type: employment contract (HPP)
100% allocation
Remote work with occasional travel as required
Location: Czechia
Work model: Fully remote, optional onsite visit approximately once per month
Submit your application online in one easy step. Apply now!