• Design, build, and maintain reusable Terraform modules for core GCP services — GKE, Cloud Run, BigQuery, Cloud SQL, Pub/Sub, VPC networking, IAM, KMS, and Cloud Storage.
• Establish IaC standards, module versioning strategy, and a private module registry.
• Implement automated CI/CD pipelines for infrastructure (Cloud Build, GitHub Actions, or GitLab CI) with plan/apply gating, drift detection, and policy validation.
• Embed Policy-as-Code using Open Policy Agent (OPA/Rego), Sentinel, or GCP Organization Policies to enforce security and compliance guardrails.
• Manage Terraform state at scale (remote backends, workspace strategy, state isolation per environment).

Service Catalog

• Build and operate a self-service Service Catalog (e.g., Backstage, GCP Service Catalog, or equivalent) where developers can provision approved cloud building blocks on demand.
• Create golden-path templates and blueprints fo...