Manage and troubleshoot GKE clusters (Autopilot and Standard) across Dev, QA, Test, and Production for a national-scale government education platform spanning 30+ microservices. • Design and maintain CI/CD pipelines with Cloud Build, Cloud Deploy, and Artifact Registry, including multi environment promotion (dev, test, prod) with approvals. • Lead incident response and root-cause analysis for production outages, from application-layer bugs to infrastructure failures in storage, networking, and SSO. • Contribute application-level code fixes (Java/JSF) across backend and frontend services, resolving bugs end to end alongside the client's development team. • Administer IAM, Secure Source Manager, and secret management across multiple GCP projects; monitor platform health and alerting with Cloud Monitoring, Grafana, Loki, and Dynatrace. • Collaborate with development teams and external government partners on integration and environment-stability issues; support national cybersecurity law compliance (audit logging, threat detection, secret management hardening).

• Monitored, analyzed, and investigated security threats across Google Cloud workloads, endpoints, and infrastructure using Google Security Operations (SecOps). • Created and tuned detection rules with the Unified Data Model (UDM) and Detection Engine; used Google Threat Intelligence to track emerging threats. • Managed the full incident lifecycle, from triage and containment to eradication and recovery; developed SOAR playbooks to automate recurring responses.

• Designed scalable, highly available database solutions, selecting between Cloud SQL, Cloud Spanner, Bigtable, and Firestore; data modeling, schema design, and capacity planning. • Planned and executed migrations from on-premises and other clouds with minimal downtime; implemented backup, recovery, and disaster recovery strategies. • Optimized performance (queries, replication, horizontal and vertical scaling) and secured databases with IAM policies and access controls.

• Helped customers integrate security best practices into CI/CD pipelines and resolve Terraform IaC issues; advised on secure-by-default architectures, VPC design, and automated firewall orchestration. • Enforced least privilege through IAM automation, protected data with Cloud KMS, and optimized continuous monitoring with Security Command Center and Cloud Logging.