Cloud Engineer

Plutus21; Karachi Division; On-site; PKR 1,800,000 - 3,600,000; Full time

Job summary

Plutus21 is seeking a Cloud Engineer to join our core platform team, taking ownership of deployment, tenant isolation, and platform operations across client environments. You will package and operate the platform with security and isolation in mind, collaborating with the Principal Platform Engineer and AI Engineer to scale across clients and products.

Responsibilities include building IaC modules, managing hybrid deployments, and establishing security and observability baselines.

Qualifications

• Proven experience owning Terraform or Pulumi in production
• Hands-on Kubernetes across multiple environments
• Deep cloud provider expertise, AWS preferred
• Experience with PostgreSQL and object storage in production

Responsibilities

• Package the platform as a containerized deployment unit per client
• Build and maintain IaC modules with Terraform or Pulumi across AWS and beyond
• Keep stateful components portable (PostgreSQL, object storage, OIDC, secrets)
• Implement tenant isolation and egress controls
• Operate hybrid client-hosted deployments with secure data handling
• Define shared responsibility models and SLAs for client environments
• Manage upgrades across environments within a supported-version window
• Establish baseline security, observability, and monitoring
• Write design notes and runbooks before implementation

Skills

Cloud architecture

DevOps practices

Documentation

Cross-team communication

Tools

Terraform

Pulumi

Kubernetes

AWS

PostgreSQL

Object storage

OIDC / SSO

GitOps

Job description

Job Summary

Plutus21 is seeking a Cloud Engineer to join our core platform team and take ownership of deployment, tenant isolation, and platform operations. The Cloud Engineer will package and operate the platform across multiple client environments, whether hosted by Plutus21 or within a client's own cloud, while keeping client data secure and isolated. This role works closely with the Principal Platform Engineer and the AI Engineer and is essential to scaling the platform across clients and products.

Job Summary

Plutus21 is seeking a Cloud Engineer to join our core platform team and take ownership of deployment, tenant isolation, and platform operations. The Cloud Engineer will package and operate the platform across multiple client environments, whether hosted by Plutus21 or within a client's own cloud, while keeping client data secure and isolated. This role works closely with the Principal Platform Engineer and the AI Engineer and is essential to scaling the platform across clients and products.

Key Responsibilities

• Package the platform as a containerized deployment unit per client, with identical code running in every environment.
• Build and maintain infrastructure-as-code modules using Terraform or Pulumi, starting with AWS and designed to extend to other cloud providers.
• Keep stateful components portable, including PostgreSQL, S3-compatible object storage, OIDC identity, and pluggable secrets management.
• Implement and test tenant isolation, including isolation between sub-tenants within a single client.
• Control data egress at the infrastructure level so that only declared, client-authorized outbound connections are permitted.
• Operate hybrid deployments in client-hosted environments, including outbound-only connections to the control plane for releases and health monitoring, with no transfer of client data.
• Define and support the shared-responsibility model and service level agreements for client-hosted environments.
• Manage upgrades and releases across multiple environments within a supported-version window, without configuration drift.
• Establish baseline security and observability, including SSO, audit logging, encryption, monitoring, and alerting.
• Write clear design notes and runbooks, and document decisions before implementation begins.

Qualifications

• Proven experience owning Terraform or Pulumi codebases in production, including reusable modules and deliberate management of state and drift.
• Hands-on experience running Kubernetes or an equivalent orchestration platform across multiple environments.
• Deep expertise in at least one major cloud provider, with AWS strongly preferred, and an understanding of how to avoid vendor lock-in where it matters.
• Experience operating PostgreSQL and object storage in production, including backups, restores, and upgrades.
• Strong understanding of tenant isolation, private networking, egress control, and secrets handling, with the ability to implement them.
• Experience with CI/CD and versioned releases across many environments without configuration drift.
• Strong written communication skills, with the ability to produce clear design notes and runbooks.
• Experience deploying software into customers' own cloud accounts is a plus.
• Experience in regulated environments, such as financial data or privacy-sensitive settings, or with SOC 2 readiness is a plus.
• Experience with a second cloud provider such as GCP or Azure is a plus.
• Familiarity with GitOps and policy-as-code is a plus.
• Experience operating platforms that run AI or LLM workloads is a plus.