GCP Terraform Setup for Django App
Budget: $750 – $1,500 USD
Project Overview
We are seeking an expert GCP/DevOps Engineer to build a secure, multi-tenant "Hub-and-Spoke" architecture for Steward, a AI application processing sensitive information. The goal is to create a "Gold Image" Terraform template that allows us to spin up completely isolated, HIPAA-compliant client environments (Spokes) that securely connect to a centralized dictionary server (Hub).
Technical Stack
Infrastructure: Google Cloud Platform (GCP)
IaC: Terraform (Modular, reusable scripts)
Compute: Google Cloud Run (Serverless containers)
Database: Cloud SQL for PostgreSQL (with pgvector enabled)
Networking: VPC, Private Service Connect (PSC), Cloud NAT, Identity-Aware Proxy (IAP)
Security: Cloud KMS (CMEK), IAM Workload Identity, Security Command Center (SCC)
Scope of Work
Master Hub Build: Configure the central project containing the master PostgreSQL dictionary and the Artifact Registry for Docker images.
The "Spoke" Template: Develop a highly modular Terraform template for client onboarding. Each Spoke must be a standalone GCP project with a private VPC, isolated database, and serverless compute.
Secure Connectivity: Implement Private Service Connect (PSC) to allow Spoke-to-Hub communication without traversing the public internet.
Security Hardening: Ensure the architecture has Zero Public IPs. Configure all resources to meet the GCP HIPAA compliance baseline.
Documentation: Provide a simple "Deployment Guide" so a non-engineer can execute the Terraform plan to onboard new clients.
Required Qualifications
Proven experience deploying HIPAA-compliant workloads on GCP.
Expertise in Terraform (specifically creating reusable modules for multi-tenant environments).
Deep understanding of GCP Networking (VPC Peering vs. Private Service Connect).
Experience with Workload Identity and managing service accounts with the Principle of Least Privilege.
Ability to validate work against the GCP Security Command Center HIPAA posture.
We are seeking an expert GCP/DevOps Engineer to build a secure, multi-tenant "Hub-and-Spoke" architecture for Steward, a AI application processing sensitive information. The goal is to create a "Gold Image" Terraform template that allows us to spin up completely isolated, HIPAA-compliant client environments (Spokes) that securely connect to a centralized dictionary server (Hub).
Technical Stack
Infrastructure: Google Cloud Platform (GCP)
IaC: Terraform (Modular, reusable scripts)
Compute: Google Cloud Run (Serverless containers)
Database: Cloud SQL for PostgreSQL (with pgvector enabled)
Networking: VPC, Private Service Connect (PSC), Cloud NAT, Identity-Aware Proxy (IAP)
Security: Cloud KMS (CMEK), IAM Workload Identity, Security Command Center (SCC)
Scope of Work
Master Hub Build: Configure the central project containing the master PostgreSQL dictionary and the Artifact Registry for Docker images.
The "Spoke" Template: Develop a highly modular Terraform template for client onboarding. Each Spoke must be a standalone GCP project with a private VPC, isolated database, and serverless compute.
Secure Connectivity: Implement Private Service Connect (PSC) to allow Spoke-to-Hub communication without traversing the public internet.
Security Hardening: Ensure the architecture has Zero Public IPs. Configure all resources to meet the GCP HIPAA compliance baseline.
Documentation: Provide a simple "Deployment Guide" so a non-engineer can execute the Terraform plan to onboard new clients.
Required Qualifications
Proven experience deploying HIPAA-compliant workloads on GCP.
Expertise in Terraform (specifically creating reusable modules for multi-tenant environments).
Deep understanding of GCP Networking (VPC Peering vs. Private Service Connect).
Experience with Workload Identity and managing service accounts with the Principle of Least Privilege.
Ability to validate work against the GCP Security Command Center HIPAA posture.