Looking for a Senior Cloud Infrastructure and Security Engineer

We are a Web3 start-up focusing on Identity Provision and fraud detection with significant backing and partnerships in the blockchain space (more details will follow once initiated a conversation)

We are seeking an experienced Cloud Infrastructure and Security Engineer with a strong background in GCP
and Kubernetes to join our team and help us review our infrastructure, formalize our scaling approach and audit our security standard.

The ideal candidate will be responsible for designing, deploying, and
managing the firm's Identity Provider (IdP) application on the GCP platform using Kubernetes.
They will work closely with our development team to ensure seamless integration and deployment of the application components, as well as maintain and optimize the infrastructure for scalability, reliability, and security.

Requirements:
• Ability to design and implement the GCP infrastructure, including VPC, subnets, firewalls, and other
resources.
• Manage application deployment and scaling in a Google Kubernetes Engine (GKE) cluster, utilizing
Docker for containerization and developing optimized Kubernetes manifests and services.
• Help us optimize cloud costs by selecting appropriate GCP services and scaling strategies, such as serverless
offerings like Cloud Functions and App Engine.
• Configure and manage multiple live production environments tailored to individual client needs.
• Implement and manage CI/CD pipelines for automated deployments of application components
using tools like Github Actions, Jenkins, or others.
• Manage and optimize cloud deployment of AI models, integrating with existing CI/CD pipelines and
using frameworks like TensorFlow Serving, MLflow or Kubeflow to ensure high availability,
autoscaling, and version control
• Ensure the application and infrastructure adhere to security best practices by implementing
comprehensive security measures including firewalls, encryption, IAM roles, and intrusion
detection. Ensure resilience against common attacks like DDoS, CSRF and more, while employing
network segmentation, VPNs and monitoring for continuous threat management.
• Develop and maintain a custom router capable of routing traffic optimally within the external
services and the Kubernetes cluster.
• Optionally, we would like help to leverage infrastructure-as-code tools such as Terraform or Ansible for automated and scalable cloud resource provisioning, as well as using Helm for Kubernetes application management.

Requirements:
• 4+ years of experience in cloud deployment, specifically using Kubernetes and GCP services.
• Strong knowledge of Kubernetes and containerization technologies (Docker).
• Proficient in implementing CI/CD pipelines, with demonstrated expertise in using Github Actions for
streamlined and automated deployments.
• Expertise in infrastructure-as-code tools like Terraform or Ansible for automated provisioning, as
well as experience with Helm for Kubernetes application management.
• Experience in deploying and scaling AI models in a cloud environment, familiar with model
versioning and resilience frameworks like TensorFlow Serving, MLflow, or Kubeflow.
• In-depth knowledge of network and cloud security.
• Strong expertise in TCP/IP and UDP network protocols, complemented by practical experience in
network debugging and forensics using tools like Wireshark and tcpdump. Prior experience in
crafting network flow extractors, specialized routers, and packet analyzers is a plus.
• Strong problem-solving skills and the ability to work well in a team-oriented environment.
• Excellent communication skills, both written and verbal

Please reach out to me directly, we will follow-up with a first call and depending on alignment with the role, a second meeting with the team.

Thanks in advance,
Massimo