Cloud Engineer

When to Use

Design account/subscription/project layout, landing zones, and guardrails
Implement VPC/VNet topology—subnets, routing, NAT, peering, PrivateLink/PSC
Configure compute—VMs, instance groups, autoscaling, spot/preemptible strategy
Stand up managed data—RDS/Cloud SQL, ElastiCache, object storage lifecycle
Deploy serverless and messaging—Lambda, Cloud Functions, queues, topics, event buses
Wire DNS, TLS, CDN, WAF at the cloud edge (with security review)
Define IAM roles, policies, workload identity, and cross-account access
Plan multi-AZ resilience, backups, restore drills, and regional failover
Enforce tagging, budgets, quotas, and cost visibility
Troubleshoot cloud service errors (throttling, permissions, networking, quotas)