Job Description

Cloud platforms rarely exist in isolation. They need to connect to data centres, enterprise applications, data services and the teams that run them. As a GCP Platform Engineer at NCS, you'll help make those connections work.

You'll design, build and operate Google Cloud platforms for enterprise clients. Your work will cover hybrid connectivity, networking, Terraform, CI/CD, security and observability. You'll work with cloud architects, data engineers, security specialists and client stakeholders to take a platform from initial design through implementation and into production support.

This is a hands-on role in a consulting practice. We need someone who can do the technical work and talk about it clearly. You'll ask good questions, explain trade-offs, document decisions and make sure the solution fits the client's operating setting.

The role suits an engineer with a solid practical foundation who is ready to take more ownership in client conversations and design decisions.

What You'll Work On

The exact mix will vary from project to project, but you can expect to:

Hybrid Cloud and Networking

- You'll design, implement and support hybrid connectivity between on-premises data centres and Google Cloud using Cloud Interconnect, HA VPN, Cloud Router and BGP.
- You'll build and operate VPC and Shared VPC environments, including subnetting, routing, firewall policies, Cloud DNS, load balancing and network segmentation.
- You'll connect cloud infrastructure, data platforms and enterprise applications to on-premises systems using patterns such as SFTP, Kafka and REST APIs.
- You'll contribute to landing zones, cloud migrations and modernisation initiatives, including the support model that follows delivery.

Automation and Delivery





- You'll develop and maintain Terraform configurations across multiple environments.
- You'll build and support CI/CD pipelines for infrastructure and platform changes.
- You'll produce high-level designs, low-level designs, integration specifications, implementation runbooks and operational guides.

Operations and Improvement

- You'll implement logging, metrics, alerting, dashboards and operational reporting across cloud and hybrid environments.
- You'll troubleshoot complex connectivity and infrastructure issues across GCP, on-premises networks and third-party services.
- You'll contribute to incident response, root cause analysis and improvements that make the platform easier to support.
- You'll take part in architecture reviews, design workshops and implementation activities.
- You'll explain options, risks and trade-offs to technical and non-technical audiences.

Security Is Part of the Job

Security isn't a separate hand-off in this role. Our platform standard is private by default.

- Workloads do not have assigned public IP addresses. We use approved hybrid connectivity for on-premises access.
- Private Service Connect is used where supported and appropriate for access to Google APIs, managed services and published services.
- VPC Service Controls IAM and network controls work together to protect data and reduce exfiltration risk.
- Firewall policies follow least privilege, and internet egress is denied by default. Approved outbound access goes through Cloud NAT or another controlled, monitored egress path.
- Secrets are stored in Secret Manager. Production workloads use workload-specific service accounts and do not rely on default service accounts.
- Customer-managed keys in Cloud KMS protect data in supported services where client or regulatory requirements call for them.

Required audit and security logs are centralised and sent to the enterprise SIEM

📌 GCP Cloud Architect / Lead Platform Engineer (Melbourne)
🏢 NCS Australia
📍 Melbourne