Cloud Engineer
Apex Systems
Turn this role into an interview — a resume and cover letter built around what this employer wants.
Job summary
Apex Systems is looking for a Cloud Engineer to join our Hybrid team in SE Michigan. You will design, build, and maintain the cloud platform, focusing on automation, scalability, security, and cost efficiency for a global fleet of connected vehicles.
You will lead IaC efforts, manage Kubernetes clusters (EKS/GKE), Istio, and CI/CD pipelines with GitOps tooling. A strong background in Terraform, Helm, and multi-cloud AWS/GCP is required.
Qualifications
- Bachelor's or Master's degree in Computer Science, Engineering, or a related field.
- 5+ years of professional experience in Cloud Engineering, Platform Engineering, DevOps, SRE, or Software Engineering.
- 3+ years of experience managing cloud infrastructure in AWS and/or GCP.
Responsibilities
- Design, develop, and maintain the cloud platform, infrastructure, and automation tooling.
- Build cloud-native solutions for automated shard provisioning and scalable platform operations.
- Develop Terraform modules and IaC workflows across AWS and GCP.
- Configure Kubernetes clusters (EKS/GKE) and Istio service mesh for multi-region deployments.
- Create and maintain Helm charts; implement API gateway and ingress management.
- Develop and maintain CI/CD pipelines with ArgoCD, Tekton, Concourse; enable GitOps workflows.
- Ensure security, cost efficiency, and observability across the platform.
Skills
Education
Tools
Job description
Job#: 3042106
Role: Cloud Engineer
Location: Hybrid - 4 days/week onsite in SE MI
Duration: Long-Term Contract
As a Software Engineer on the Cloud Engineering team, you will design, develop, and maintain the cloud platform, infrastructure, and automation tooling that powers our connected vehicle ecosystem. You will play a key role in improving reliability, scalability, security, and cost efficiency across a platform serving millions of vehicles worldwide.
- Design and build cloud-native solutions that enable automated, repeatable shard provisioning.
- Develop tooling for:
- Kubernetes cluster bootstrapping
- Network configuration
- Service mesh deployment
- Health validation and readiness checks
- Build control plane capabilities that allow a new shard to be provisioned and production-ready within 24 hours with zero manual intervention.
- Develop and maintain production-grade Terraform modules across AWS and GCP environments.
- Manage GitOps-based infrastructure workflows utilizing Atlantis or similar tools.
- Ensure infrastructure changes are properly reviewed, tested, and fully auditable before production deployment.
- Provision, manage, and automate Kubernetes clusters in AWS EKS and Google GKE environments.
- Create and maintain Helm charts supporting multi-shard deployments across regions and environments.
- Configure and operate Istio service mesh capabilities, including:
- Traffic management
- mTLS enforcement
- Observability and monitoring
- Design and operate GCP-native platform services, including:
- Google Kubernetes Engine (GKE)
- Pub/Sub
- Cloud Storage
- Secret Manager
- Workload Identity Federation
- VPC Service Controls (VPC-SC)
- Support the phased migration of platform services from AWS to GCP.
- Design, configure, and operate API gateway technologies such as Tyk, Apigee, or NGINX.
- Implement routing policies, rate limiting, mTLS enforcement, and SLI/SLO metric replication.
- Execute zero-downtime ingress migrations through automation and validation processes.
- Develop and maintain CI/CD pipelines using:
- ArgoCD
- Tekton
- Concourse
- Similar GitOps tools
- Automate deployment controls including:
- Cluster health validation
- Fleet distribution verification
- Rollback triggers
- Migration orchestration
- Implement cloud security best practices across AWS and GCP.
- Manage:
- IAM role isolation
- Least-privilege access controls
- Workload identity
- Automated access reviews
- Monitor and remediate:
- Certificate expiration risks
- Security policy drift
- Cloud quota thresholds
- Design and maintain monitoring, alerting, and dashboarding solutions using:
- Prometheus
- Grafana
- Datadog
- Google Cloud Operations
- Provide visibility into:
- Platform health
- Fleet distribution metrics
- Service reliability and SLO compliance
- Develop automation scripts and internal tooling using:
- Python
- Go
- Bash
- Node.js
- Build tools supporting:
- Migration orchestration
- Fleet validation
- Runbook automation
- Capacity planning
- Participate in on-call support rotations.
- Troubleshoot production incidents and platform issues.
- Apply Site Reliability Engineering (SRE) principles to improve system resilience.
- Drive root cause analysis and permanent corrective actions.
- Bachelor's or Master's degree in Computer Science, Engineering, or a related field.
- 5+ years of professional experience in Cloud Engineering, Platform Engineering, DevOps, SRE, or Software Engineering.
- Experience building and operating production infrastructure at scale.
- 3+ years of experience managing cloud infrastructure in AWS and/or GCP.
- Hands‑on experience provisioning and managing Kubernetes clusters (EKS or GKE) in production environments.
- Strong experience with Terraform and Infrastructure as Code (IaC) best practices.
- Experience with GitOps workflows and infrastructure automation.
- Proficiency developing and maintaining Helm charts.
- Strong troubleshooting and problem-solving skills in cloud and distributed systems environments.
- Experience with monitoring and observability platforms such as Prometheus, Grafana, Datadog, or similar solutions.
- Cluster operations and upgrades
- Networking and security
- Workload management
- Monitoring and troubleshooting
- Platform operations
- Reliability and scalability
- Configuration management
- Operational excellence
- Google Cloud Platform (GKE, Pub/Sub, Cloud Storage, Workload Identity, VPC-SC, Cloud Operations)
- AWS cloud services and infrastructure management
- Multi-cloud platform architecture and migration strategies
- Istio service mesh administration
- Traffic management and observability
- Helm chart development and lifecycle management
- Tyk
- Apigee
- NGINX
- Routing policies, mTLS, and API governance
- ArgoCD
- Tekton
- Concourse
- GitOps deployment methodologies
- Python
- Go
- Java (Spring Boot)
- Node.js
- Bash or PowerShell scripting
- IAM and role-based access control
- OAuth2/OIDC
- mTLS implementation
- Multi-cloud security architecture
- gRPC service development
- Protocol Buffers (Protobuf) schema management
- Atlantis, Terragrunt, or collaborative Terraform workflow tools
EEO Employer
Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or 844-463-6178.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
