Cloud Engineer

Kforce Inc; San Mateo (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Kforce is seeking a Cloud Engineer in Foster City, CA to operate and support an AWS environment, partnering with the Cloud Engineering team and across IT & Applications, Infrastructure, Product Software, Data Platform, and Manufacturing Operations.

This role performs day-to-day provisioning, automation, and support work to keep the AWS platform secure and reliable, including IAM, networking, and guardrails while collaborating with cross-functional teams.

Qualifications

• 5+ years of hands-on AWS production experience.
• Infrastructure as Code experience, ideally Terraform, including modules.
• Knowledge of AWS networking (VPCs, subnets, routing) and IAM security fundamentals.
• Good written and verbal communication; able to work with engineers and stakeholders.
• Ability to work independently on well-scoped tasks and escalate when needed.

Responsibilities

• Provision and manage AWS accounts and IAM.
• Write and maintain Terraform modules for account setup and networking.
• Build and configure AWS networking resources (VPCs, subnets, routing).
• Support secrets management workflows (Secrets Manager, Vault).
• Apply least-privilege IAM and encryption guardrails.
• Troubleshoot AWS tickets across compute, storage, networking.
• Follow runbooks and escalate architectural issues when needed.

Skills

AWS

Terraform

IAM

Networking

Security

Communication

Tools

Kubernetes/EKS

Grafana

CloudWatch

Job description

Responsibilities

Kforce has a client in Foster City, CA that is seeking a Cloud Engineer. Summary: We're looking for a Cloud Engineer to help operate and support our AWS environment, working closely with the Cloud Engineering team and partnering with engineering teams across IT & Applications, Infrastructure, Product Software, Data Platform, and Manufacturing Operations. This role executes day-to-day provisioning, automation, and support work that keeps our client's AWS platform running securely and reliably.

• Provision and manage AWS accounts and tenant structures, including IAM users/roles, cross-account access, and SSO group setup, following established playbooks
• Write and maintain Terraform modules - both applying existing centralized modules and authoring new ones - for account setup, networking, IAM, and resource provisioning
• Build and configure AWS networking resources (VPCs, subnets, VPC peering, routing) based on team designs
• Support secrets management workflows (AWS Secrets Manager, Vault) for integrations with third-party platforms (e.g., Mulesoft)
• Apply security and governance guardrails to provisioned resources (least-privilege IAM, encryption, AMI/container compliance checks)
• Troubleshoot and resolve day-to-day AWS support tickets across compute, storage, and networking for cross-functional customers (engineering tools, HPC/simulation workloads, mission control systems, data platform, manufacturing systems)
• Follow and help maintain runbooks/playbooks for recurring provisioning and operational tasks
• Escalate architectural or ambiguous issues to senior team members while owning execution of well-defined requests

Requirements

• 5+ years of experience
• Hands-on experience with AWS in a production environment - compute, storage, networking, and IAM
• Experience with Infrastructure as Code, ideally Terraform, including writing and modifying modules
• Working knowledge of AWS networking fundamentals (VPCs, subnets, routing, security groups)
• Understanding of IAM and cloud security fundamentals (least privilege, encryption, secrets management)
• Comfortable working from tickets, playbooks, and runbooks, and following documented processes accurately
• Good written and verbal communication skills; able to work with engineers and business stakeholders to clarify requirements
• Ability to work independently on well-scoped tasks while knowing when to elevate

Bonus Qualifications

• Experience with Terraform Cloud, Spacelift, or similar centralized IaC platforms
• Exposure to multi-account AWS environments (Landing Zones, Control Tower)
• Experience with containerized workloads (Kubernetes/EKS)
• Familiarity with monitoring/alerting tools (e.g., Grafana, CloudWatch)
• Exposure to AI/ML or HPC cloud workloads

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.