Cloud Engineer - Terraform / CloudFormation

Job Description

Cloud Expertise: Google Cloud Platform (GCP) Mandatory, AWS Experience Required Key Responsibilities - Provision, manage, and support GCP sandbox environments for testing and development. - Ensure sandbox governance, security, and compliance with Citi policies. - Engage with Google Cloud & AWS support teams to troubleshoot and resolve issues. - Ensure sandbox isolation from production workloads and enforce resource lifecycle management (deletion/suspension of unused resources). - Onboard Citi teams and developers to new or existing AWS/GCP accounts. - Manage user access for single/multiple cloud accounts, ensuring least privilege access. - Assign and audit IAM roles and permissions for security and compliance. - Remove user access to specific accounts as needed. - Configure real-time alerts for sandbox activities and send to Citi Sandbox Email DL IDs. - Set up budget alerts (soft/hard limits) to prevent overspending. - Monitor security incidents, unauthorized access attempts, and anomalies. - Implement cost tracking mechanisms and automate resource cleanup to prevent cost overruns. - Implement GCP/AWS cost control measures (budgets, quotas, auto-scaling). - Track spending patterns and optimize resource allocation. - Ensure compliance with financial industry regulations (SOC 2, ISO 27001, GDPR). - Conduct periodic security and cost audits. - Automate cloud operations using Terraform, CloudFormation, or Deployment Manager. - Use Python/Bash scripting for process automation and cost/resource optimization.