Cloud Engineer

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

You are a cloud-first, hands-on Staff Cloud Engineer who serves as a key technical contributor for the enterprise Google Cloud Platform (GCP) environment. You bring strong engineering expertise, sound architectural judgment, and a platform-focused mindset to help design, build, and operate secure, scalable, and production-grade GCP landing zones in highly regulated environments. You are comfortable translating architecture into implementation, writing production-quality code, documenting technical decisions through Architecture Decision Records (ADRs), and collaborating with cross-functional teams to deliver reliable cloud platform capabilities.

You influence peers and stakeholders through technical expertise, practical solutions, and operational excellence. You believe Infrastructure as Code, security-by-design, automation, and observability are foundational principles for modern cloud platforms. You are motivated by building scalable, self-service solutions that enable teams to innovate quickly while maintaining reliability, compliance, and governance standards.

• Support the enterprise GCP platform, including organization structure, resource hierarchy, billing, networking architecture, IAM tiering, CMEK, VPC Service Controls, and centralized logging.
• Design, implement, and maintain enterprise GCP Landing Zone capabilities, including Shared VPC, project factory patterns, Org Policies, and governance guardrails.
• Contribute to GCP architecture and engineering decisions, ensuring solutions are scalable, secure, reliable, and operationally ready.
• Implement and maintain engineering standards across Infrastructure as Code, Git Ops workflows, naming conventions, tagging strategies, branching models, and deployment practices using Terraform and Kubernetes Config Connector (KCC).

• Serve as a senior technical contributor within the GCP Cloud Engineering and Platform teams.
• Partner with enterprise architecture, security, networking, operations, and application teams to translate business and regulatory requirements into scalable cloud solutions.
• Collaborate across technology and platform teams, including AI and provisioning platforms, to enable secure and efficient cloud adoption.
• Contribute to cloud strategy initiatives and support GCP adoption as a strategic enterprise platform.

• Design and implement enterprise-grade GCP networking solutions, including Shared VPC, NCC hub-and-spoke architectures, VPC Service Controls, Private Service Connect, Cloud NAT, and hybrid connectivity using Cloud Interconnect and HA VPN.
• Deploy and support secure private GKE clusters using Workload Identity, Binary Authorization, Shielded Nodes, Config Sync, and least-privilege IAM practices.
• Implement identity and access management solutions leveraging IAM, group-based access controls, PAM entitlements, Workload Identity Federation, and Entra n.
• Assess platform designs for performance, reliability, scalability, cost optimization, and operational sustainability.

• Build and maintain self-service platform capabilities that enable product teams to deploy workloads safely and independently.
• Implement observability solutions using Cloud Monitoring, Cloud Logging, Datadog,…