DevOps Engineer / Senior Platform Engineer (Harness IDP & GCP)

job summary:

Join our enterprise platform engineering team to build, standardize, and scale modern cloud deployment capabilities across Google Cloud Platform, Harness, Apigee X, and Terraform. In this role, you will create reusable CI/CD blueprints and developer self-service workflows that empower software engineering teams to deploy securely, reliably, and rapidly.

location: Telecommute job type: Contract salary: $43.33 - 53.33 per hour work hours: 8am to 5pm education: Bachelors

responsibilities:

• Design and build reusable Harness Pipeline, Stage, and Step Templates to establish enterprise-wide standardized deployment patterns.
• Implement Pipeline-as-Code using YAML, Git workflows, pull requests, and automated governance via Open Policy Agent (OPA).
• Leverage Harness IDP to deliver frictionless developer self-service workflows, automated onboarding, and paved-road deployment patterns.
• Develop standardized CI/CD pipelines and deployment patterns for GCP Cloud Functions, covering environment configurations, traffic splitting, and canary/blue-green releases.
• Automate the deployment and lifecycle management of Apigee X API proxies, bundles, policies, and environments using Harness and tools like apigeecli/apigeectl.
• Author modular, reusable Terraform components to provision cloud infrastructure, Harness configurations, and GCP IAM resources.
• Implement robust DevSecOps controls, least-privilege IAM patterns, Workload Identity Federation, and automated quality/security gates.
• Author technical architecture patterns, runbooks, and documentation while partnering with development teams for smooth platform adoption.

qualifications:

Bachelor's Degree in a related field.

2+ years of hands-on experience in enterprise CI/CD and DevSecOps engineering, specifically utilizing Harness for modular pipeline templating and Pipeline-as-Code.

Hands-on proficiency with Harness IDP (Internal Developer Portal) and automated governance via Open Policy Agent (OPA).

2+ years of experience deploying and automating GCP serverless architectures, specifically GCP Cloud Functions.

Experience with Apigee X API management, proxy automation, and CLI tools (apigeecli / apigeectl).

Strong proficiency in Infrastructure as Code using Terraform to provision cloud foundations and IAM policies.

Working knowledge of GCP security architectures, including Service Account Impersonation, Workload Identity Federation, and secrets management.

Excellent technical documentation and cross-team communication skills.

PREFERRED QUALIFICATIONS

Proven background designing enterprise-scale internal developer platforms (IDP) and "golden path" architectures.

Experience migrating large engineering groups from legacy CI/CD systems to standardized modern platform solutions.

Working familiarity with software supply-chain security, artifact signing, and automated compliance frameworks.

skills:

API management,API lifecycle,Apigee,API,APIs,release automation,Application Architecture,Design and build,cloud infrastructure,Cloud,linting,CI/CD,deployment pipelines,deployment strategies,Automate provisioning,DevOps,DevSecOps,DevSecOps practices,Identity Federation,Git,Google Cloud Platform (GCP),GCP security,IAM,IAM & Security,infrastructure-as-code practices,infrastructure automation,Infrastructure as Code (IaC),secrets management,policy-as-code,roles and permissions,serverless,version control,Impersonation,Terraform,security scanning,vulnerability detection,YAML,reliability,Architecture,automation,Automate,automated,automating,enterprise security,onboarding,enterprise engineering,governance,infrastructure,engineering skills,policy enforcement,Platform Engineer,platform engineering,compliance requirements,compliance controls,compliance checks,security,promotion,security controls,standardize,Standardization,supply-chain,technical communication,technical documentation,traceability,vulnerability,workflows

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact HRsupport@randstadusa.com.

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.