Cloud Engineer (AWS & Azure)

Invensoft Technologies; Mysuru; On-site; INR 1,500,000 - 3,000,000; Full time

Job summary

Invensoft Technologies in Mysuru seeks a Senior Cloud Architect to design and manage multi-cloud environments across AWS and Azure, using IaC tools like Terraform, CloudFormation, and Bicep. You will ensure high availability, security, and cost-conscious architectures.

You will lead security implementations, IAM controls, network hardening, and governance, while driving continuous improvement and architectural reviews.

Qualifications

• 56 years of hands-on experience managing enterprise cloud environments across AWS and Azure.
• Deep knowledge of core AWS services (EC2, S3, RDS, Lambda, IAM, CloudWatch, VPC) and Azure services (VMs, Blob Storage, Azure SQL, Functions, Entra ID, VNets).
• Hands-on proficiency with Infrastructure as Code (Terraform, Bicep or CloudFormation).
• Familiarity with containerization tools (Docker, Kubernetes, EKS/AKS).
• Experience with cloud cost management and governance tools (AWS Cost Explorer, Azure Cost Management, CloudHealth or Kubecost).
• Strong understanding of cloud cybersecurity frameworks, data protection standards and network security protocols.

Responsibilities

• Multi-Cloud Resource Creation & Management (AWS & Azure) with IaC tools.
• Maintain high availability, scalability and DR strategies across VMs, containers, networking and serverless components.
• Automate deployment pipelines and standard DevOps practices.
• Cost optimization, rightsizing, auto-scaling, RI/Savings Plans and cost governance.
• Security management with IAM, perimeter controls, WAF, zero trust and threat monitoring.
• Data security, encryption, DLP, backups and disaster recovery.
• Continuous improvement and architecture reviews; document SOPs and runbooks.

Skills

AWS

Azure

Terraform

CloudFormation

Bicep

EKS

AKS

ECS

IAM

Entra ID

Zero Trust

Security Monitoring

Cost Optimization

IaC

Kubernetes

Education

AWS Certified Solutions Architect

Azure Administrator Associate

Azure Security Engineer Associate

Tools

Terraform

CloudFormation

Bicep

Docker

Kubernetes

EKS

AKS

ECS

AWS Cost Explorer

Azure Cost Management

CloudHealth

Kubecost

IAM

Entra ID

Job description

Role & responsibilities

Key Responsibilities

1. Multi-Cloud Resource Creation & Management (AWS & Azure)

• Provision, configure and manage cloud infrastructure across AWS and Azure using Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation, Azure ARM/Bicep).
• Maintain high availability, scalability and disaster recovery strategies across virtual machines, containerized workloads (EKS, AKS, ECS), networking components (VPCs, VNets) and serverless architectures.
• Automate deployment pipelines and routine operations using standard DevOps methodologies.

2. Cost Optimization & Resource Usage Tuning

• Analyze cloud spending across AWS and Azure to identify cost-reduction opportunities.
• Implement rightsizing policies, auto-scaling, Reserved Instances (RIs), Savings Plans and Spot instances to eliminate waste.
• Monitor resource utilization metrics to optimize workload performance while avoiding over-provisioning.
• Establish budget alerts, cost allocation tags and chargeback/showback mechanisms for departments.

3. Security Management, Implementations & Cyber Security

• Implement robust identity and access management (IAM) controls using least-privilege principles across AWS IAM and Microsoft Entra ID (Azure AD).
• Enforce perimeter and network security using firewalls, Security Groups, WAF (Web Application Firewall) and Zero Trust network configurations.
• Deploy and manage threat detection and monitoring solutions (e.g., AWS GuardDuty, Security Hub, Microsoft Defender for Cloud, Microsoft Sentinel).
• Conduct vulnerability scanning, assist with compliance audits (e.g., SOC 2, ISO 27001) and remediate identified security gaps quickly.

4. Data Security & Governance

• Implement data encryption both at rest (AWS KMS, Azure Key Vault) and in transit (TLS/SSL).
• Configure data loss prevention (DLP) controls, secure storage buckets/containers and access policies for sensitive data.
• Establish data backup, retention and disaster recovery strategies aligned with enterprise data governance standards.

5. Continuous Improvement & Architecture Recommendations

• Continuously evaluate emerging cloud technology, recommending upgrades and architectural enhancements.
• Participate in architectural reviews to suggest resilience, efficiency and security improvements for existing systems.
• Document system architecture, standard operating procedures (SOPs) and operational runbooks.

Required Qualifications & Experience

Experience: 56 years of hands-on experience managing enterprise cloud environments across both AWS and Azure.

Technical Skills:

• Deep knowledge of core AWS services (EC2, S3, RDS, Lambda, IAM, CloudWatch, VPC) and Azure services (VMs, Blob Storage, Azure SQL, Functions, Entra ID, VNets).
• Hands-on proficiency with Infrastructure as Code (Terraform, Bicep or CloudFormation).
• Familiarity with containerization tools (Docker, Kubernetes, EKS/AKS).
• Experience with cloud cost management and governance tools (AWS Cost Explorer, Azure Cost Management, CloudHealth or Kubecost).
• Strong understanding of cloud cybersecurity frameworks, data protection standards and network security protocols.

Preferred Certifications

• AWS Certified Solutions Architect / Administrator
• Microsoft Certified: Azure Administrator Associate / Azure Security Engineer Associate