AWS Cloud Engineer with Terraform & Networking

UST

Thiruvananthapuram

On-site

INR 2,500,000 - 5,000,000

Full time

14 hours ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

UST is seeking a highly skilled Infrastructure Engineer to design, secure, and optimize AWS-based cloud infrastructure for enterprise-scale platforms. You will build IaC pipelines, manage container platforms (Kubernetes, EKS), and enable GenAI services with Bedrock and AgentCore, while collaborating with security, SRE, and DevOps teams.

This role emphasizes reliability, scalability, cost control, and compliance in a fast-paced cloud-native environment.

Qualifications

5–9 years of hands-on AWS Cloud Infrastructure, Platform Engineering, DevOps, Cloud Security, and Infrastructure Automation experience.
Experience designing and managing enterprise-scale AWS environments using Infrastructure as Code.
Strong knowledge of container orchestration, cloud networking, cloud security, monitoring, and automation.
Experience supporting mission-critical, highly available production environments with focus on security and scalability.

Responsibilities

AWS Cloud Infrastructure & Networking: Design, implement, and manage scalable AWS infrastructure following Well-Architected Framework best practices.
Infrastructure as Code: Develop reusable IaC modules using Terraform, AWS CDK, and CloudFormation; automate provisioning.
Platform Engineering & Container Services: Deploy and manage cloud-native apps using Kubernetes, EKS, ECS/Fargate, and Docker.
AI / GenAI Infrastructure: Provision and manage secure infrastructure for Bedrock and AgentCore workloads.
Cloud Security & Compliance: Implement IAM, KMS, Secrets Manager; enforce security controls and governance.
Observability & Reliability Engineering: Implement CloudWatch/OpenTelemetry; build dashboards and runbooks; RCA and incident remediation.
FinOps & Cloud Cost Optimization: Monitor usage and optimize costs; assist budgeting and governance.
DevOps & Collaboration: Integrate IaC deployments into CI/CD pipelines; promote DevSecOps practices.

Skills

AWS

Terraform

Kubernetes

Docker

OpenTelemetry

CloudFormation

AWS CDK

Git

CI/CD

FinOps

Bedrock

AgentCore

SRE

Platform Engineering

Security

Tools

Terraform

AWS CDK

CloudFormation

Docker

Job description

Position OverviewWe are looking for a highly skilled

Role Description Position OverviewWe are looking for a highly skilled Infrastructure Engineer with strong expertise in AWS Cloud Infrastructure, Platform Engineering, DevOps, Cloud Security, and Infrastructure Automation. The ideal candidate will be responsible for designing, implementing, securing, and optimizing highly available, scalable, and cloud-native infrastructure on AWS. This role will play a key part in building secure enterprise platforms supporting modern cloud applications, containerized workloads, and next-generation AI/GenAI services powered by Amazon Bedrock and AWS AgentCore. You will collaborate closely with Platform Engineering, DevOps, Security, Architecture, and Application teams to deliver resilient, compliant, and automated cloud environments aligned with enterprise standards.

Key Responsibilities 1. AWS Cloud Infrastructure & Networking

Design, implement, and manage scalable AWS infrastructure following Well-Architected Framework best practices.

Configure and maintain AWS networking services including:

Amazon VPC

Public & Private Subnets

Route Tables

Security Groups

Network ACLs

Internet Gateway

NAT Gateway

AWS Transit Gateway

VPC Endpoints / AWS PrivateLink

Amazon Route 53

Application & Network Load Balancers (ALB/NLB)

AWS WAF

Amazon CloudFront

Build highly available, fault-tolerant, and disaster recovery-ready cloud environments.

Optimize network performance, security, and connectivity across multi-account AWS environments.

Infrastructure as Code (IaC) & Automation

Develop reusable Infrastructure-as-Code modules using:

Terraform

AWS CDK

AWS CloudFormation

Automate infrastructure provisioning and lifecycle management.

Implement infrastructure versioning, modularization, and reusable deployment patterns.

Enforce governance through Policy-as-Code and automated compliance validation.

Platform Engineering & Container Services

Deploy and manage cloud-native applications using:

Kubernetes

Amazon EKS

Amazon ECS/Fargate

Docker

Build scalable and secure container platforms.

Support application modernization initiatives and cloud-native platform adoption.

Improve platform reliability, scalability, and operational efficiency.

AI / GenAI Infrastructure

Provision and manage secure infrastructure supporting:

Amazon Bedrock

AWS AgentCore

Design secure networking and access controls for AI workloads.

Implement monitoring, logging, and operational controls for AI platform services.

Collaborate with AI engineering teams to deliver scalable GenAI infrastructure.

Cloud Security & Compliance

Design and implement AWS cloud security best practices.

Configure and manage:

AWS IAM

AWS KMS

AWS Secrets Manager

Implement enterprise-grade security controls including:

Mutual TLS (mTLS)

OAuth 2.0 / OpenID Connect (OIDC)

API Security

Rate Limiting

PHI Data Protection & Tokenization

Ensure cloud infrastructure complies with organizational security standards and regulatory requirements.

Observability & Reliability Engineering

Implement enterprise observability using:

Amazon CloudWatch

OpenTelemetry

Develop dashboards, and operational runbooks.

Perform production troubleshooting, root cause analysis (RCA), and incident remediation.

Improve platform reliability through proactive monitoring and automation.

FinOps & Cloud Cost Optimization

Monitor cloud resource utilization and infrastructure spend.

Recommend and implement cost optimization strategies.

Support cloud budgeting, forecasting, and governance initiatives.

Optimize compute, storage, networking, and managed service costs without compromising performance.

DevOps & Collaboration

Maintain Infrastructure-as-Code repositories using Git/GitHub.

Integrate infrastructure deployments into CI/CD pipelines.

Collaborate with Security, DevOps, SRE, Platform Engineering, and Application teams to deliver secure and automated cloud solutions.

Promote DevSecOps best practices across engineering teams.

Required Technical Skills

AWS Cloud Services

Amazon VPC

Route 53

Transit Gateway

AWS PrivateLink

ALB / NLB

AWS WAF

CloudFront

AWS KMS

AWS Secrets Manager

Amazon Bedrock

AWS AgentCore

Infrastructure as Code

Terraform

AWS CDK

AWS CloudFormation

Containers & Platform Engineering

Kubernetes

Amazon EKS

Amazon ECS/Fargate

Docker

Monitoring & Observability

Amazon CloudWatch

OpenTelemetry

Security

mTLS

OAuth 2.0 / OIDC

API Security

Rate Limiting

PHI Tokenization

Encryption & Key Management

DevOps

GitHub

CI/CD Pipelines

Infrastructure Automation

Cloud Operations

Incident Management

Root Cause Analysis

Reliability EngineeringDisaster Recovery

High Availability

FinOps / Cloud Cost Optimization

Preferred Qualifications

Experience supporting Healthcare, Life Sciences, or other regulated industries.

Good understanding of HIPAA, HITRUST, and cloud compliance frameworks.

Hands‑on experience with Amazon Bedrock, GenAI, and AI platform infrastructure.

Exposure to Platform Engineering, Site Reliability Engineering (SRE), and DevSecOps practices.

Experience implementing Policy-as-Code, cloud governance, and security automation.

AWS certifications such as AWS Certified Solutions Architect – Associate/Professional, AWS Certified Security – Specialty, or AWS Certified DevOps Engineer – Professional are highly desirable.

Required Experience