Senior Cloud Engineer

We are seeking an execution-driven and technically seasoned Senior Cloud Engineer with a strong focus on Google Cloud Platform (GCP), infrastructure automation, and security-first cloud architecture. As the primary GCP specialist within an experienced CloudOps team, you will partner closely with multi-cloud engineers while owning the design, operation, and evolution of our GCP environments. This role is ideal for someone with 5+ years of experience designing and operating cloud-native platforms in production, implementing scalable networking strategies, and hardening environments through thoughtful IAM and security controls. You will play a key role in building reliable, secure, and observable systems that support mission-critical workloads.

This is a fully remote role (based in the US or Canada), with occasional travel (1–2 times per year) for in-person collaboration, covered by NMI. If you live near a company office, occasional in-person collaboration is encouraged.
The ideal candidate: 

• Has a proven track record implementing low-toil, infrastructure as code cloud infrastructure on GCP
• Builds secure-by-default environments with strong IAM design, least privilege, and guardrails
• Understands GCP networking deeply, including shared VPC design, segmentation, routing, and private connectivity patterns
• Is comfortable operating production systems with an observability-first mindset
• Enjoys cross-functional collaboration with distributed teams across infrastructure, engineering, and security
• Can lead technical initiatives end-to-end while remaining hands-on
• Ideally has experience with BigQuery and Bigtable in production environments
  Key responsibilities:
  Cloud Infrastructure and Reliability: 
• Design, implement, and operate production GCP infrastructure with high availability, scalability, and resilience
• Ensure high reliability and performance of services, proactively resolving issues before customer impact
• Participate in on-call rotations and drive post-incident reviews and blameless post-mortems
• Collaborate with other engineers to ensure cross-cloud consistency in areas such as IAM philosophy, tagging, observability standards, Terraform patterns, and security controls.
  IAM and Security Implementation: 
• Design and maintain IAM strategies (least privilege, service accounts, role design, separation of duties)
• Implement and operationalize security controls such as organization policies, audit logging, and key management
• Partner with security teams to meet compliance requirements and improve cloud security posture Networking Strategy 
  Networking Strategy and Architecture: 
• Architect GCP networking patterns including VPCs, shared VPCs, firewall policies, routing, load balancing, and private service access
• Drive secure connectivity patterns between services and environments (prod/non-prod), including hybrid connectivity where applicable
• Troubleshoot complex network and connectivity issues across cloud services
  Automation and Tooling: 
• Lead automation initiatives for provisioning and operational tasks using infrastructure-as-code and CI/CD pipelines
• Build and maintain tooling and standards for observability (metrics, logs, traces, dashboards, and alerting)
• Continuously improve developer experience through reusable modules, templates, and documentation
  Data Platform Enablement (Preferred):
• Support and optimize cloud data services such as BigQuery and BigTable, including security, access patterns, and performance considerations
• Collaborate with engineering and analytics stakeholders on scalable data workflows and governance
  Qualifications and experience
  Required: 
• 5+ years in cloud engineering, SRE, DevOps, or infrastructure engineering roles with significant GCP experience
• Strong hands-on experience with GCP IAM, including service accounts, custom roles, and least privilege design
• Strong understanding of GCP networking, including VPC design, routing, firewalling, load balancing, and private connectivity patterns
• Experience implementing cloud security controls and best practices (logging, encryption, key management, policy guardrails)
• Proficiency in infrastructure-as-code and automation (Terraform strongly preferred) and scripting (Python, Bash, or Go)
• Experience operating production environments with strong troubleshooting skills and an observability mindset
  Preferred: 
• Experience with BigQuery and Bigtable (security, access management, performance tuning, and operations)
• Experience with Kubernetes on GKE
• Familiarity with SIEM/SOAR tooling or cloud security posture management approaches
• Google Cloud certifications are a plus (Professional Cloud Architect, Professional Cloud Security Engineer, Professional Cloud Network Engineer, etc.)
• Experience in agile teams (Scrum, Kanban) and fast-moving scale-up environments
• Hands-on GitLab experience is a plus

As well as being a part of something exciting everyday, you will also receive the following benefits:

• • Annual salary of $125,000 - $160,000 + bonus
  • A remote first culture!
  • Flex PTO 
  • Health, Dental and Vision Insurance
  • 13 Paid Holidays
  • Company volunteer days

What we do!

NMI enables our partners with choice, and challenges the one-size-fits-all approach to payments. You've probably used NMI in the last 24 hours without even realizing it. We’re the platform that powers success for innovative tech created by SMBs, entrepreneurs and fintech startups. We’re creative problem solvers who help visionaries smash through boundaries and think beyond what’s possible so they can think about what’s next. But we’re not just built for the tech savvy. We democratize the latest payments technology so that everyone can realize the benefits of easy payments across the full spectrum of commerce. We’re all about enabling more payments in more ways and more places.

We believe that having a diverse group of employees strengthens both our work and our workplace. We’re focused on making NMI more diverse and welcoming with initiatives like having a dedicated Diversity, Equity & Inclusion action group, diversity goals for hiring, anonymized resume screening, affinity groups such as our Women's network and LGBTQ+ Network, open forums for discussions on diversity and social justice, and measuring inclusion and belonging as part of our regular employee engagement surveys.

Equal Opportunity

NMI is committed to providing equal employment opportunity for all persons regardless of race, color, religion, sex, age, marital status, national origin, sexual orientation or sexual identity, genetic information, citizen status (except those that do not have the legal right to be employed in the United States), disability, military service, service member, veteran status, or any other basis protected by applicable law.

Please be aware that all offers of employment are made subject to receipt of satisfactory background and financial checks.

Attention job applicants: Please note that in compliance with the data protection regulations within your jurisdiction, any personal information submitted with your job application may be collected and used by NMI for the purpose of recruitment and employment-related activities. By submitting your application, you acknowledge and provide explicit consent to the processing of your personal information as described in our privacy policy found on our website. For more information on how we process your information, please read our privacy policy here: https://www.nmi.com/legal/privacy-policy/

#LI-Remote