An Associate Cloud Engineer deploys and secures applications and infrastructure, monitors operations of multiple projects, and maintains enterprise solutions to ensure that they meet target performance metrics. This individual has experience working with public clouds and on-premises solutions. They are able to use Google Cloud Console and the command-line interface to perform common platform-based tasks to maintain and scale one or more deployed solutions that leverage Google-managed or self-managed services on Google Cloud. The skills include: Setting up a cloud solution environment- Setting up cloud projects and accounts. Activities include: Creating a resource hierarchyApplying organizational policies to the resource hierarchyGranting members IAM roles within a projectManaging users and groups in Cloud Identity (manually and automated)Enabling APIs within projectsProvisioning and setting up products in Google Clouds operations suite- Managing billing configuration. Activities include: Creating one or more billing accountsLinking projects to a billing accountEstablishing billing budgets and alertsSetting up billing exports- Installing and configuring the command line interface (CLI), specifically the Cloud SDK (e.g, setting the default project).Planning and configuring a cloud solution- Planning and estimating Google Cloud product use using the Pricing Calculator- Planning and configuring compute resources. Considerations include: Selecting appropriate compute choices for a given workload (e.g, Compute Engine, Google Kubernetes Engine, Cloud Run, Cloud Functions)Using preemptible VMs and custom machine types as appropriate- Planning and configuring data storage options. Considerations include: Product choice (e.g, Cloud SQL, BigQuery, Firestore, Cloud Spanner, Cloud Bigtable)Choosing storage options (e.g, Zonal persistent disk, Regional balanced persistent disk, Standard, Nearline, Coldline, Archive)- Planning and configuring network resources. Tasks include: Differentiating load balancing optionsIdentifying resource locations in a network for availabilityConfiguring Cloud DNSDeploying and implementing a cloud solution- Deploying and implementing Compute Engine resources. Tasks include: Launching a compute instance using Cloud Console and Cloud SDK (gcloud) (e.g, assign disks, availability policy, SSH keys)Creating an autoscaled managed instance group using an instance templateGenerating/uploading a custom SSH key for instancesInstalling and configuring the Cloud Monitoring and Logging AgentAssessing compute quotas and requesting increases- Deploying and implementing Google Kubernetes Engine resources. Tasks include: Installing and configuring the command line interface (CLI) for Kubernetes (kubectl)Deploying a Google Kubernetes Engine cluster with different configurations including AutoPilot, regional clusters, private clusters, etc. Deploying a containerized application to Google Kubernetes EngineConfiguring Google Kubernetes Engine monitoring and logging- Deploying and implementing Cloud Run and Cloud Functions resources. Tasks include, where applicable: Deploying an application and updating scaling configuration, versions, and traffic splittingDeploying an application that receives Google Cloud events (e.g, Pub/Sub events, Cloud Storage object change notification events)- Deploying and implementing data solutions. Tasks include: Initializing data systems with products (e.g, Cloud SQL, Firestore, BigQuery, Cloud Spanner, Pub/Sub, Cloud Bigtable, Dataproc, Dataflow, Cloud Storage)Loading data (e.g, command line upload, API transfer, import/export, load data from Cloud Storage, streaming data to Pub/Sub)- Deploying and implementing networking resources. Tasks include: Creating a VPC with subnets (e.g, custom-mode VPC, shared VPC)Launching a Compute Engine instance with custom network configuration (e.g, internal-only IP address, Google private access, static external and private IP address, network tags)Creating ingress and egress firewall rules for a VPC (e.g, IP subnets, network tags, service accounts)Creating a VPN between a Google VPC and an external network using Cloud VPNCreating a load balancer to distribute application network traffic to an application (e.g, Global HTTP(S) load balancer, Global SSL Proxy load balancer, Global TCP Proxy load balancer, regional network load balancer, regional internal load balancer)- Deploying a solution using Cloud Marketplace. Tasks include: Browsing the Cloud Marketplace catalog and viewing solution detailsDeploying a Cloud Marketplace solution- Implementing resources via infrastructure as code. Tasks include: Building infrastructure via Cloud Foundation Toolkit templates and implementing best practicesInstalling and configuring Config Connector in Google Kubernetes Engine to create, update, delete, and secure resourcesEnsuring successful operation of a cloud solution- Managing Compute Engine resources. Tasks include: Managing a single VM instance (e.g, start, stop, edit configuration, or delete an instance)Remotely connecting to t
