AWS Cloud Engineer (Networking, DevSecOps & Security)

QBOYD SOFTWARE SOLUTIONS; Kuala Lumpur; Presencial; MYR 120.000 - 240.000; Jornada completa

Descripción de la vacante

QBOYD SOFTWARE SOLUTIONS in Malaysia is seeking an AWS Cloud Engineer to design, build, secure and operate cloud infrastructure, including multi-account AWS setups, EKS workloads and CI/CD pipelines. You will own the path from code commit to production and ensure secure, compliant environments across all stages.

Key activities include designing scalable AWS architectures, provisioning IaC with Terraform or CDK, managing containers with Kubernetes, and implementing security controls, monitoring

Formación

• 5+ years in cloud, infrastructure, network or security engineering.
• 3+ years hands-on with AWS in production environments.
• Experience designing and operating containerised workloads on Kubernetes.
• Proven delivery of CI/CD pipelines in a team environment.
• Degree in Computer Science, Engineering or equivalent practical experience.

Responsabilidades

• Design and deploy scalable, highly available AWS architectures across multiple accounts.
• Build and operate EKS clusters, ECR repositories, and container workloads using Helm and GitOps practices.
• Provision and manage infrastructure as code with Terraform or AWS CDK.
• Migrate workloads to AWS, including batch processing (AWS Batch, Lambda) and relational databases (Aurora, RDS).
• Monitor, tune and optimise cost and performance with CloudWatch and cost management tooling.
• Design VPC layouts, subnets, route tables and multi-account connectivity using Transit Gateway and PrivateLink.
• Establish and maintain hybrid connectivity through Site-to-Site VPN and Direct Connect.
• Configure DNS, load balancing and content delivery using Route 53, ALB/NLB and CloudFront.
• Enforce network security through security groups, NACLs and AWS Network Firewall.
• Troubleshoot routing, latency and connectivity issues across BGP, TCP/IP and IPSec paths.

Conocimientos

DevSecOps

Security best practices

Kubernetes

Educación

Degree in Computer Science, Engineering or equivalent

Herramientas

Terraform

AWS CDK

Kubernetes

GitHub Actions

GitLab CI

AWS CodePipeline

Secrets Manager

KMS

GuardDuty

Security Hub

WAF

Descripción del empleo

Availability: Immediate

Deployment up to 3 months

Role summary: The AWS Cloud Engineer designs, builds, secures and operates cloud infrastructure, network connectivity, CI/CD pipelines and security controls for containerised applications running on AWS, including EKS-hosted workloads. The role owns the full path from code commit to production, and keeps the environment compliant and secure at every stage.

Key Responsibilities

• Design and deploy scalable, highly available AWS architectures across multiple accounts and Availability Zones.
• Build and operate EKS clusters, ECR repositories, and container workloads using Helm and GitOps practices.
• Provision and manage infrastructure as code with Terraform or AWS CDK.
• Migrate workloads to AWS, including batch processing (AWS Batch, Lambda) and relational databases (Aurora, RDS).
• Monitor, tune and optimise cost and performance with CloudWatch and cost management tooling.
• Design VPC layouts, subnets, route tables and multi-account connectivity using Transit Gateway and PrivateLink.
• Establish and maintain hybrid connectivity through Site-to-Site VPN and Direct Connect.
• Configure DNS, load balancing and content delivery using Route 53, ALB/NLB and CloudFront.
• Enforce network security through security groups, NACLs and AWS Network Firewall.
• Troubleshoot routing, latency and connectivity issues across BGP, TCP/IP and IPSec paths.

DevSecOps and CI/CD

• Build and maintain CI/CD pipelines that build, test, scan and deploy workloads to non-production and production environments.
• Integrate security checks into pipelines, including dependency scanning, container image scanning and infrastructure policy checks.
• Manage secrets and credentials securely using Secrets Manager and KMS, with IAM roles for service accounts.
• Automate deployment, rollback and environment provisioning.
• Define and enforce identity and access controls using IAM, IAM Identity Center, AWS Organizations and service control policies.
• Monitor and respond to threats using GuardDuty, Security Hub, AWS Config and CloudTrail.
• Protect data with encryption at rest and in transit, using KMS and related controls.
• Secure public-facing services with AWS WAF and Shield.
• Maintain alignment with CIS benchmarks and relevant compliance frameworks (for example ISO 27001 or PCI DSS).
• Support incident response, security investigations and audit evidence collection.

Documentation and Collaboration

• Produce architecture diagrams, runbooks, and security and network standards.
• Work with application, database and security teams to translate requirements into secure, supportable designs.
• Mentor junior engineers and contribute to team standards and knowledge sharing.

Required Skills

• DevSecOps: GitHub Actions, GitLab CI or AWS CodePipeline; Terraform or CDK; policy-as-code
• Security: IAM, AWS Organizations and SCPs, KMS, Secrets Manager, GuardDuty, Security Hub, WAF, CIS benchmarks

Experience and Qualifications

• 5+ years in cloud, infrastructure, network or security engineering
• 3+ years hands-on with AWS in production environments
• Experience designing and operating containerised workloads on Kubernetes
• Proven delivery of CI/CD pipelines in a team environment
• Degree in Computer Science, Engineering or equivalent practical experience

Certifications

• Required: AWS Solutions Architect – Associate (or higher)

Personal Attributes

• Strong troubleshooting and analytical skills
• Clear written and verbal communication with technical and non-technical audiences
• Ownership mindset, with a focus on security and reliability
• Comfortable working across time zones with partner teams