Cloud Engineer

Plutus21 Partners; Bogotá ciudad; On-site; COP 75,000,000 - 120,000,000; Full time

Job summary

Plutus21 is seeking a Cloud Engineer to own deployment, tenant isolation, and platform operations across client environments. You will package the platform as containerized deployments and build IaC modules starting with AWS, extending to other clouds.

This role emphasizes secure data handling, cross-team collaboration, and scalable platform operations. Work closely with the Principal Platform Engineer and AI Engineer to scale the platform for multiple clients and products, ensuring robust

Qualifications

• Proven experience owning Terraform or Pulumi codebases in production with reusable modules and drift management.
• Hands-on experience running Kubernetes or an equivalent orchestrator across multiple environments.
• Deep expertise in at least one major cloud provider, preferably AWS, with understanding of avoiding vendor lock-in.

Responsibilities

• Package the platform as a containerized deployment unit per client with identical code across environments.
• Build and maintain infrastructure-as-code modules starting with AWS and extensible to other providers.
• Keep stateful components portable (PostgreSQL, S3-compatible storage, OIDC, secrets management).
• Implement and test tenant isolation between sub-tenants within a client.
• Control data egress at infrastructure level to enforce client-authorized outbound connections.
• Operate hybrid deployments in client-hosted environments with secure releases and health monitoring.
• Define and support shared-responsibility models and SLAs for client-hosted environments.
• Manage upgrades/releases across environments within a supported version window.
• Establish baseline security and observability (SSO, audits, encryption, monitoring, alerts).
• Write design notes and runbooks before implementation.

Skills

Terraform

Kubernetes

Cloud provider

PostgreSQL

Security

CI/CD

GitOps

Observability

Documentation

AI workloads

Tools

Pulumi

Job description

Job Summary

Plutus21 is seeking a Cloud Engineer to join our core platform team and take ownership of deployment, tenant isolation, and platform operations. The Cloud Engineer will package and operate the platform across multiple client environments, whether hosted by Plutus21 or within a client's own cloud, while keeping client data secure and isolated. This role works closely with the Principal Platform Engineer and the AI Engineer and is essential to scaling the platform across clients and products.

Job Summary

Plutus21 is seeking a Cloud Engineer to join our core platform team and take ownership of deployment, tenant isolation, and platform operations. The Cloud Engineer will package and operate the platform across multiple client environments, whether hosted by Plutus21 or within a client's own cloud, while keeping client data secure and isolated. This role works closely with the Principal Platform Engineer and the AI Engineer and is essential to scaling the platform across clients and products.

Key Responsibilities

• Package the platform as a containerized deployment unit per client, with identical code running in every environment.
• Build and maintain infrastructure-as-code modules using Terraform or Pulumi, starting with AWS and designed to extend to other cloud providers.
• Keep stateful components portable, including PostgreSQL, S3-compatible object storage, OIDC identity, and pluggable secrets management.
• Implement and test tenant isolation, including isolation between sub‑tenants within a single client.
• Control data egress at the infrastructure level so that only declared, client‑authorized outbound connections are permitted.
• Operate hybrid deployments in client‑hosted environments, including outbound‑only connections to the control plane for releases and health monitoring, with no transfer of client data.
• Define and support the shared-responsibility model and service level agreements for client-hosted environments.
• Manage upgrades and releases across multiple environments within a supported‑version window, without configuration drift.
• Establish baseline security and observability, including SSO, audit logging, encryption, monitoring, and alerting.
• Write clear design notes and runbooks, and document decisions before implementation begins.

Qualifications

• Proven experience owning Terraform or Pulumi codebases in production, including reusable modules and deliberate management of state and drift.
• Hands-on experience running Kubernetes or an equivalent orchestration platform across multiple environments.
• Deep expertise in at least one major cloud provider, with AWS strongly preferred, and an understanding of how to avoid vendor lock‑in where it matters.
• Experience operating PostgreSQL and object storage in production, including backups, restores, and upgrades.
• Strong understanding of tenant isolation, private networking, egress control, and secrets handling, with the ability to implement them.
• Experience with CI/CD and versioned releases across many environments without configuration drift.
• Strong written communication skills, with the ability to produce clear design notes and runbooks.
• Experience deploying software into customers' own cloud accounts is a plus.
• Experience in regulated environments, such as financial data or privacy‑sensitive settings, or with SOC 2 readiness is a plus.
• Experience with a second cloud provider such as GCP or Azure is a plus.
• Familiarity with GitOps and policy-as-code is a plus.
• Experience operating platforms that run AI or LLM workloads is a plus.