Senior Cloud Platform Engineer

Nordea Group Technology is seeking a Senior Cloud Platform Engineer with deep Google Cloud experience to own and evolve the Google Cloud Landing Zone. This is a hands-on role. You'll be building new capabilities into the platform as well as keeping what we already run healthy, secure, and reliable. Nordea has a long history across the Nordics, but the way we work today looks a lot more like a tech company than a traditional bank. What we build touches millions of people every day, so it has to be dependable and it has to keep their money and data safe. That responsibility is a big part of what makes the work interesting. About our team We're the Cloud Platform Team, a group of cloud specialists who own and evolve Nordea's enterprise cloud platforms. We work alongside application teams through their whole cloud journey, from first onboarding into day-to-day operations and optimization. What you'll be doing The heart of this role is our Google Cloud Landing Zone. You'll be developing new features for it and maintaining the existing platform. In practice that means: Building and maintaining Landing Zone infrastructure as code with Terraform, handling configuration management with Ansible, and writing automation in Python and Bash for provisioning and ongoing operations. Building central, reusable solutions at the Landing Zone level so that application teams can adopt them with minimal effort, instead of every team solving the same problems on their own. Designing and running the CI/CD pipelines that ship Landing Zone changes, keeping those pipelines healthy, and setting up automated testing for platform components, while helping the wider team work in a genuine DevOps way rather than just talking about it. Staying active in day-to-day engineering: raising and reviewing pull requests as a normal part of how the team works, and contributing to architecture documentation so the reasoning behind the platform is written down and easy to follow. Keeping an eye out for gaps in our automation and closing them, so we're not repeating manual work that could be scripted. Designing the networking foundation across our organisation, folder, and project structure: VPCs (including Shared VPC), subnets, firewall rules, Cloud Router, and the segmentation that keeps workloads properly separated. Building and operating hybrid connectivity between Google Cloud and our on-premises data centres using Dedicated and Partner Interconnect and Cloud VPN, and making sure it's reliable and performant. Applying zero trust principles to how workloads and users get access, so that connectivity is never implicitly trusted just because it's inside the network. This includes sensible use of Cloud IAM, VPC Service Controls, and, where it fits. Setting the governance guardrails and best practices (organisation policy, the Cloud Foundation Toolkit / Terraform blueprints, and a well-structured resource hierarchy) that keep the platform compliant with banking security standards, without turning every request into a ticket queue. Building the platform's observability, including the dashboards we use to monitor and control it, so that both our team and the application teams can see what's running and react quickly when something looks off. Leading P1/P2 incident response when things go wrong: driving the response, running root cause analysis, coordinating across teams, and improving our procedures afterwards so we don't hit the same wall twice.