GCP Cloud Integration for HR Assistant

Job Title

Freelance GCP Cloud Integration Engineer for Engage Lynk HR Maya Assistant

Project Description

Engage Lynk is seeking an experienced Cloud Integration Engineer to deploy, secure, integrate, and test Maya, our HR workflow and policy-assistance platform.

The backend and algorithm architecture are prepared. The selected freelancer will productionize the system on Google Cloud Platform, integrate the Gemini API, configure secure authentication, connect the website interface, and verify the complete deployment.

This is a hands-on implementation project, not a consultation-only assignment.

Roles and Responsibilities
Review Maya’s existing Node.js backend, frontend, algorithm, and policy corpus.
Deploy the application to Google Cloud Run.
Configure Cloud Build and Artifact Registry.
Store Gemini credentials securely in Google Secret Manager.
Configure IAM roles using least-privilege access.
Create or configure a dedicated service account.
Implement OIDC or Workload Identity Federation where required.
Connect the engagelynk.com interface to the Cloud Run backend.
Configure HTTPS endpoints, CORS, security headers, and rate limiting.
Implement and test /health and /api/ask endpoints.
Integrate policy-grounded retrieval and source citations.
Configure webhook authentication, signatures, replay protection, and idempotency.
Protect employee and confidential HR information.
Configure Cloud Logging, monitoring, alerts, and error reporting.
Troubleshoot deployment, permissions, API, dependency, and networking issues.
Conduct security, functional, load, and failure-recovery testing.
Produce deployment documentation and a rollback procedure.
Transfer complete administrative ownership to Engage Lynk.
Required Technical Skills
Google Cloud Platform
Cloud Run
Cloud Build
Artifact Registry
Secret Manager
Google IAM and service accounts
Node.js and Express.js
REST API and webhook integration
Gemini API or similar LLM API integration
OAuth 2.0, OIDC and Workload Identity Federation
JSON and YAML configuration
Git and CI/CD
Cloud Logging and monitoring
Application security and privacy controls
Linux, Bash and Google Cloud Shell
Preferred Experience
AI assistant or RAG application deployment
Policy-grounded response systems
HR technology or sensitive-data applications
Prompt-injection and data-exfiltration controls
API Gateway, Cloud Armor or equivalent controls
Infrastructure as Code using Terraform
Google Cloud Professional certification
Expected Deliverables
Maya deployed successfully on Google Cloud Run.
Public Cloud Run URL connected to the Engage Lynk website.
Gemini API connected through Secret Manager.
Working health and chat endpoints.
Policy corpus and algorithm integrated correctly.
IAM and authentication controls configured.
Logging, monitoring and alerts activated.
Security and functional test report.
Final source code and configuration package.
Deployment, maintenance and rollback documentation.
Knowledge-transfer session with Engage Lynk.
No vendor lock-in or freelancer-controlled credentials.
Acceptance Criteria

The project will be accepted when:

/health reports Maya as operational.
The provider status confirms Gemini connectivity.
General HR policy questions return valid responses.
Sensitive requests are blocked or routed for human review.
Secrets are absent from source code and logs.
Unauthorized origins and requests are rejected.
Engage Lynk has full ownership of the GCP resources, code and credentials.
Deployment can be reproduced using the supplied documentation.
Freelancer Application Requirements

Applicants should provide:

Relevant GCP and Cloud Run projects
Experience deploying Node.js or AI applications
Experience with IAM, OIDC and Secret Manager
Proposed implementation approach
Estimated delivery schedule
Fixed-price or hourly quotation
Availability for testing and knowledge transfer
Screening Questions
Have you deployed a Node.js AI application on Google Cloud Run?
How would you manage Gemini API credentials securely?
How would you prevent unauthorized access to internal HR data?
Have you implemented OIDC or Workload Identity Federation?
How would you secure incoming and outgoing webhooks?
What tests would you complete before production release?
Can you provide complete deployment and rollback documentation?

Important: Do not request Gemini keys, Google passwords, service-account private keys, or other credentials through Freelancer chat. Access will be granted through controlled GCP IAM permissions.