SRE - GCP Kubernetes Terraform

About the role

At Grupo NS we are incorporating a Site Reliability Engineer (SRE) to join a platform team responsible for the reliability, security, and lifecycle management of Cloud environments. This is a hybrid project in Málaga (Spain).

What you'll do

The selected person will work on automating the provisioning, operation, and decommissioning of environments, applying Infrastructure as Code, CI/CD, observability, and security practices to ensure robust, scalable, and efficient platforms.

We are looking for a technical profile with experience in Cloud, DevOps, or Platform Engineering, an orientation toward automation, and the ability to improve service reliability.

We are looking for an autonomous, analytical professional oriented toward problem-solving, with an automation mindset and a focus on platform reliability and security.

The ability to collaborate with multidisciplinary teams, document technical solutions, and promote best practices in engineering, observability, and Cloud operations will be important.

What will you do?

• Manage the complete lifecycle of Cloud environments, from request and provisioning to operation and decommissioning.
• Automate the provisioning and removal of environments through Infrastructure as Code (IaC) and CI/CD pipelines, avoiding manual interventions.
• Validate requests for new environments, ensuring their integrity, consistency, and compliance with security and governance policies.
• Operate, maintain, and improve Kubernetes workloads, especially in Google Kubernetes Engine (GKE).
• Manage networks, permissions, identities, and secrets in Cloud environments, applying the principle of least privilege.
• Design and improve monitoring, alerting, and logging solutions, as well as integration with SIEM systems.
• Participate in incident management, root cause analysis, and the preparation of post-mortem reports.
• Automate repetitive tasks and reduce operational load through self-service flows, approvals, tracking, and resource cleanup.
• Collaborate with engineering teams and FDEs (Forward Deployed Engineers) to facilitate deployments and manage the environment lifecycle.
• Promote continuous improvement of platform availability, security, performance, and reliability.

What we're looking for

• Minimum 3 years of experience in Site Reliability Engineering (SRE), DevOps, or Platform Engineering.
• Hands-on experience with public Cloud platforms, preferably Google Cloud Platform (GCP).
• Knowledge of GCP services and components, especially:
• Google Kubernetes Engine (GKE).
• IAM (Identity and Access Management).
• VPC and Cloud networking.
• Secret Manager.
• KMS (Key Management Service).
• Solid experience in Infrastructure as Code, especially with Terraform.
• Experience in the design, implementation, and maintenance of CI/CD pipelines.
• Knowledge of GitHub Actions and security practices in pipelines, including OIDC/Workload Identity, version-pinned actions or secure references, and minimum permissions.
• Solid knowledge of Kubernetes and Helm.
• Experience working with Linux and scripting via Bash and/or Python.
• Knowledge of Cloud security, encryption, auditing, and compliance requirements.
• Ability to automate operational processes, improve observability, and resolve incidents.
• Good oral and written communication skills in English.

Nice to have

• Experience with Terramate and advanced management of Terraform configurations.
• Knowledge of MongoDB, Keycloak, or other stateful services.
• Experience with observability tools such as Prometheus, Grafana, and Cloud Monitoring.
• Experience in promotion flows between different environments: development, demo, and production.
• Knowledge of integrating monitoring and security platforms with SIEM solutions.
• Experience in automating self-service flows and efficient management of the Cloud resource lifecycle.
• Experience in continuous reliability improvement and reduction of repetitive operational work (toil).