Cloud Engineer

Talentify; Foster City (CA); Hybrid; USD 138,000 - 145,000; Full time

Job summary

Talentify is seeking a Cloud Engineer in Foster City, CA for a 06+ month contract with possible extension. The role requires hybrid work with at least 3 days in the office and AWS-focused operations to keep the platform secure and reliable.

You will provision accounts, manage IAM, and automate with IaC in a collaborative IT environment. Responsibilities include building VPCs, configuring networking, securing resources, and resolving day-to-day AWS issues while following runbooks.

Qualifications

• 5+ years of experience.
• Hands-on AWS in a production environment (compute, storage, networking, IAM).
• Experience with IaC, Terraform, including modules.
• Knowledge of AWS networking fundamentals (VPCs, subnets, routing, SGs).
• Understanding IAM and cloud security fundamentals (least privilege, encryption, secrets).
• Comfort with tickets, playbooks, runbooks and documented processes.
• Strong written and verbal communication with engineers and stakeholders.
• Ability to work independently on well-scoped tasks; escalate when needed.

Responsibilities

• Provision and manage AWS accounts, IAM, and SSO per playbooks.
• Write and maintain Terraform modules for accounts, networking, IAM.
• Configure VPCs, subnets, and routing per designs.
• Manage secrets workflows with Secrets Manager and Vault.
• Apply security guardrails: least privilege, encryption, compliance.
• Troubleshoot AWS tickets across compute, storage, networking.
• Follow runbooks and escalate as needed.
• Collaborate with cross-functional teams across IT & Applications.

Skills

AWS experience

IaC Terraform

Networking fundamentals

Security fundamentals

Communication skills

Independent worker

Tools

Terraform

Terraform Cloud

Spacelift

Vault

Kubernetes

Grafana

CloudWatch

Job description

Job Title

Cloud Engineer

Job Duration

06+ Months contract with possible extension.

Location

Foster City, CA 94404

Pay Range

$100.00- 105.00/hour on W2.

Work Type

Hybrid

Job Description

Cloud Engineer

Onsite in Foster City, CA | at least 3 days in office

Client is expanding its IT Platform team to support our mission of Autonomous Mobility. We're looking for a Cloud Engineer to help operate and support our AWS environment, working closely with the Cloud Engineering team and partnering with engineering teams across IT & Applications, Infrastructure, Product Software, Data Platform, and Manufacturing Operations. This role executes day-to-day provisioning, automation, and support work that keeps Client's AWS platform running securely and reliably.

In this role, you will

• Provision and manage AWS accounts and tenant structures, including IAM users/roles, cross-account access, and SSO group setup, following established playbooks
• Write and maintain Terraform modules - both applying existing centralized modules and authoring new ones - for account setup, networking, IAM, and resource provisioning
• Build and configure AWS networking resources (VPCs, subnets, VPC peering, routing) based on team designs
• Support secrets management workflows (AWS Secrets Manager, Vault) for integrations with third-party platforms (e.g., Mulesoft)
• Apply security and governance guardrails to provisioned resources (least-privilege IAM, encryption, AMI/container compliance checks)
• Troubleshoot and resolve day-to-day AWS support tickets across compute, storage, and networking for cross-functional customers (engineering tools, HPC/simulation workloads, mission control systems, data platform, manufacturing systems)
• Follow and help maintain runbooks/playbooks for recurring provisioning and operational tasks
• Escalate architectural or ambiguous issues to senior team members while owning execution of well-defined requests

Qualifications

• 5+ years of experience
• Hands-on experience with AWS in a production environment - compute, storage, networking, and IAM
• Experience with Infrastructure as Code, ideally Terraform, including writing and modifying modules
• Working knowledge of AWS networking fundamentals (VPCs, subnets, routing, security groups)
• Understanding of IAM and cloud security fundamentals (least privilege, encryption, secrets management)
• Comfortable working from tickets, playbooks, and runbooks, and following documented processes accurately
• Good written and verbal communication skills; able to work with engineers and business stakeholders to clarify requirements
• Ability to work independently on well-scoped tasks while knowing when to elevate

Bonus Qualifications

• Experience with Terraform Cloud, Spacelift, or similar centralized IaC platforms
• Exposure to multi-account AWS environments (Landing Zones, Control Tower)
• Experience with containerized workloads (Kubernetes/EKS)
• Familiarity with monitoring/alerting tools (e.g., Grafana, CloudWatch)
• Exposure to AI/ML or HPC cloud workloads