platform engineer Landing Zone

Nordea operates as a major Nordic bank whose technology organization supports business strategy and customer services. Its cloud platform team develops and operates enterprise Google Cloud platforms that support application teams while meeting strict security, compliance, and operational stability standards.

• Build and maintain Landing Zone infrastructure as code with Terraform, manage configuration with Ansible, and write Python and Bash automation for provisioning and operations;
• Build central, reusable Landing Zone solutions for application teams;
• Design and run CI/CD pipelines for Landing Zone changes, maintain pipeline health, and set up automated testing for platform components;
• Raise and review pull requests and contribute to architecture documentation;
• Identify automation gaps and eliminate repetitive manual work;
• Design the networking foundation across the organisation, folder, and project structure, including VPCs, Shared VPC, subnets, firewall rules, Cloud Router, and workload segmentation;
• Build and operate hybrid connectivity between Google Cloud and on-premises data centres using Dedicated Interconnect, Partner Interconnect, and Cloud VPN;
• Apply zero trust principles using Cloud IAM and VPC Service Controls;
• Set governance guardrails and best practices with organisation policy, Cloud Foundation Toolkit, Terraform blueprints, and resource hierarchy;
• Build platform observability, including monitoring and control dashboards;
• Lead P1/P2 incident response, drive resolution, perform root cause analysis, coordinate across teams, and improve procedures.

• 5+ Years of hands-on cloud engineering experience with strong, current Google Cloud experience at enterprise scale;
• Practical experience designing and running a Google Cloud Landing Zone, ideally with the Cloud Foundation Toolkit or an equivalent Terraform-based foundation;
• Strong Terraform skills for infrastructure as code;
• Solid Ansible skills for configuration and automation;
• Good programming ability in Python and Bash;
• Experience building CI/CD pipelines;
• Experience with Google Cloud networking, including VPC and Shared VPC design, Interconnect, on-premises connectivity, and zero trust access design;
• Nice to have: A degree in Computer Science, Information Technology, or a related field, GCP Professional Cloud Architect or Professional Cloud Network Engineer certification, Docker and Kubernetes experience including GKE, familiarity with security frameworks and compliance standards, monitoring and observability tooling such as Cloud Operations / Cloud Monitoring, Prometheus, Grafana, and ELK, ITIL or similar service management background, comfort working in an agile setup.

• Hybrid working model;
• A culture that fosters performance and growth in one of the largest Nordic banks;
• Opportunities to evolve, develop, and learn from colleagues with diverse backgrounds;
• For candidates in Finland, a security clearance will be performed for the selected person;
• For candidates in Poland, the CV must include the specified permit for processing personal data under GDPR;
• Job ID: 5899.