Project description
The Cloud Engineering team is responsible for managing, supporting, and continuously improving our cloud and hybrid infrastructure platforms.We are looking for a strong hands-on Senior Cloud Engineer with deep AWS expertise to design, implement, secure, automate, and operate highly available cloud infrastructure across internal and client-facing environments.AWS will be the primary cloud platform for this role. The engineer should also have a good working knowledge of other major cloud platforms such as Microsoft Azure and/or Google Cloud Platform (GCP), as some of our clients operate on these platforms or have hybrid/on-premises environments that integrate with our services.The role focuses on production reliability, cloud infrastructure, automation, observability, security, incident management, disaster recovery, performance, cost optimization, and continuous improvement.This is not a traditional infrastructure support role. The successful candidate is expected to use engineering and automation to reduce operational toil, eliminate recurring incidents, improve platform reliability, and continuously enhance operational efficiency.
Responsibilities
- 1. AWS Cloud Infrastructure
- Design, deploy, manage, and troubleshoot highly available AWS infrastructure using Infrastructure as Code.
- Strong hands-on experience with:EC2, ECS, EKS, S3, VPC, IAM, Lambda, EventBridge, AWS Batch, MSK/Kafka, OpenSearch, Route 53, Load Balancers, Auto Scaling, Secrets Manager, KMS and CloudWatch.
- Design and manage AWS networking including:o Transit Gatewayo PrivateLinko VPNo NAT Gatewayo Direct Connecto Security Groupso Network ACLso DNS and routing
- Perform infrastructure lifecycle management, patching, software upgrades, and technology refresh activities.
- Support cloud migration, modernization, and application onboarding initiatives.
- Recommend architectural improvements to enhance reliability, scalability, security, performance, and operational efficiency.
- 2. Hybrid & Multi-Cloud
- Support AWS as the primary cloud platform, while collaborating with teams supporting Azure, GCP, and client-specific cloud environments.
- Working knowledge of core Azure and/or GCP services including compute, networking, storage, identity, security, and monitoring.
- Troubleshoot connectivity and integration issues across AWS, other public clouds, and on-premises infrastructure.
- Understand hybrid connectivity patterns including VPN, dedicated connectivity, DNS, routing, identity federation, and secure data integration.
- Participate in client technical discussions involving non-AWS cloud environments where required.
- Apply consistent operational, security, reliability, and governance standards across hybrid environments.AWS depth is mandatory. Azure/GCP experience is an advantage and should not substitute for strong AWS production experience.
- 3. Automation & Infrastructure as Code
- Develop and maintain reusable Terraform modules and infrastructure automation frameworks.
- Automate infrastructure provisioning, configuration, patching, compliance checks, and operational activities.
- Develop automation using Python and/or Shell scripting.
- Build self-service capabilities to reduce manual operational activities.
- Implement automated remediation and self-healing capabilities where appropriate.
- Continuously identify opportunities to eliminate operational toil through automation.
- 4. CI/CD & DevOps
- Build and maintain CI/CD pipelines supporting infrastructure and application deployments.
- Integrate infrastructure provisioning and operational processes into DevOps workflows.
- Support containerized platforms using Docker and Kubernetes/EKS.
- Implement automated deployment, validation, and rollback mechanisms.
- Work closely with development teams to improve deployment reliability and release engineering.
- Support adoption of DevOps and SRE practices.
- 5. Observability & Monitoring
- Implement and maintain comprehensive monitoring, logging, alerting, and observability.
- Strong experience with Splunk and AWS CloudWatch.
- Support OpenTelemetry and distributed tracing.
- Develop operational dashboards, alerts, and health indicators.
- Proactively identify availability, performance, capacity, and reliability risks.
- Continuously improve monitoring and alerting to improve incident detection and reduce noise.
- 6. Security & Compliance
- Implement AWS security best practices including IAM, least privilege, encryption, secrets management, and network security.
- Support cloud security hardening and vulnerability remediation.
- Participate in security audits, vulnerability assessments, and closure of audit findings.
- Ensure cloud infrastructure complies with organizational, client, regulatory, and security requirements.
- Implement and maintain appropriate security guardrails and controls.
- Work closely with Security teams to identify and remediate cloud security risks.
- 7. Disaster Recovery & Resilience
- Design, implement, and maintain AWS disaster recovery solutions.
- Participate in DR and failover testing and validation.
- Ensure infrastructure meets defined RTO and RPO requirements.
- Identify and remediate BCP/DR gaps.
- Support multi-AZ and multi-region resilience initiatives.
- Develop and maintain DR procedures, runbooks, and recovery documentation.
- 8. Performance, Capacity & AWS Cost Optimization
- Monitor infrastructure capacity and performance and proactively identify bottlenecks.
- Conduct performance and capacity analysis and recommend improvements.
- Support scalability and resilience engineering initiatives.
- Identify and implement AWS cost optimization opportunities.
- Apply right-sizing, autoscaling, resource optimization, scheduling, and architectural improvements to reduce cloud spend.
- Identify idle and underutilized resources.
- Work with Architecture and Engineering teams to improve the cost/performance profile of the platform.
- 9. Production Operations & Reliability
- Own the operational health, availability, performance, and reliability of AWS cloud environments.
- Lead resolution of high-severity production incidents, including participation in client bridge calls where required.
- Troubleshoot complex infrastructure, networking, application, and cloud-platform issues.
- Lead technical Root Cause Analysis (RCA) for major incidents and drive corrective and preventive actions through to completion.
- Identify recurring incidents and implement permanent engineering solutions to prevent repeat failures.
- Establish and maintain cloud operational standards, guardrails, runbooks, and best practices.
- Ensure cloud service requests and operational activities are completed within defined SLAs.
- Support Change Management processes and ensure changes are implemented safely.
- Participate in on-call rotations and critical production/weekend support activities.
- 10. Collaboration & Governance
- Work closely with Development, DBA, Security, Network, Architecture, DevOps, Product, and Service Management teams.
- Support application onboarding and cloud adoption initiatives.
- Participate in technical design and architecture reviews.
- Create and maintain architecture diagrams, operational documentation, standards, and runbooks.
- Support client-facing technical discussions and production escalations.
- Participate in project planning, technology evaluations, and continuous improvement initiatives.
- ________________________________________
SKILLS
Must have
- 10+ years of IT/infrastructure engineering experience, with at least 5+ years of strong hands-on AWS experience.
- Deep hands-on experience designing, implementing, troubleshooting, and supporting production AWS environments.
- Strong knowledge of Linux/Unix administration, OS configuration, troubleshooting, and shell scripting.
- Strong understanding of AWS networking, security, cloud architecture, and high-availability principles.
- Strong experience with Terraform / Infrastructure as Code.
- Strong scripting and automation skills using Python and/or Shell.
- Experience with Docker and Kubernetes/EKS.
- Experience with CI/CD, DevOps, and SRE practices.
- Experience with monitoring, logging, and observability platforms such as Splunk, CloudWatch, and OpenTelemetry.
- Strong experience managing high-severity production incidents and performing deep technical RCA.
- Experience with DR, BCP, RTO/RPO, and resilience solutions.
- Experience with messaging middleware, particularly IBM MQ, ActiveMQ, or JMS.
- Experience with cloud security, vulnerability remediation, audit, and compliance.
- Experience with AWS cost optimization / FinOps.
- Working knowledge of Azure and/or GCP.
- Experience working in regulated, enterprise, and client-facing environments.
- Strong communication and stakeholder-management skills.
- Ability to work across Application, Infrastructure, Architecture, Security, Network, DBA, and Product teams.
- Willingness to participate in on-call rotations and critical production support activities.
- Tools & TechnologiesPrimary Cloud – AWSEC2, ECS, EKS, S3, VPC, IAM, Bedrock, Lambda, EventBridge, AWS Batch, MSK/Kafka, OpenSearch, CloudWatch, Route 53, Load Balancers, Auto Scaling, Secrets Manager, KMSOther Cloud PlatformsMicrosoft Azure and/or Google Cloud Platform (GCP) – working knowledge of compute, networking, storage, IAM, security, monitoring, and hybrid connectivity.Infrastructure & AutomationTerraform, Ansible, Python, Shell ScriptingDevOps & ContainersGitHub, GitHub Actions, Docker, Kubernetes/EKS, CI/CDObservabilitySplunk, CloudWatch, OpenTelemetryMiddlewareIBM MQ, ActiveMQ/JMS, Kafka/MSKITSM & CollaborationServiceNow, Jira, ConfluenceAI & Engineering Productivity
- Experience with GenAI tools such as GitHub Copilot, Claude, or equivalent.
- Ability to use AI to accelerate infrastructure automation, troubleshooting, documentation, CI/CD, monitoring, and operational processes.
Nice to have
- AWS Solutions Architect / DevOps Engineer certification.
- Strong SRE experience.
- Automated remediation / self-healing infrastructure.
- Multi-region AWS architecture.
- Hybrid cloud and on-premises integration experience.
- Experience migrating legacy applications/infrastructure to AWS.
- Strong experience with ECS, EKS, MSK/Kafka, OpenSearch, and event-driven architectures.
- PostgreSQL administration, upgrades, and migrations.
- Demonstrated delivery of significant AWS cost reductions.
- OpenTelemetry and distributed tracing experience.
- Experience using GenAI for engineering and operational productivity.
- Experience operating large-scale, business-critical, client-facing platforms.