Cloud Platform Engineer

KLA; Milpitas (CA); On-site; USD 110,000 - 187,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) matching

ESPP

Tuition reimbursement

Paid time off

Job summary

KLA seeks a Cloud Platform Engineer in Milpitas to build and secure scalable cloud platforms across GCP, Azure, and AWS. You will automate migrations, modernize infrastructure, and integrate security into CI/CD and IaC, collaborating with engineering and security teams.

The role requires 5+ years of hands-on cloud experience, strong networking/security knowledge, and a focus on governance, FinOps, and cost management in a dynamic, security‑minded environment.

Qualifications

• BSCS/CE degree with six years related experience.
• 5 years hands-on cloud platform engineering experience.
• Proficient in at least one major cloud platform (GCP or Azure preferred; AWS in scope).
• Solid understanding of cloud networking, security, containers, Kubernetes, serverless, and microservices.
• Hands-on with cloud security controls: IAM, encryption, key management, network security, zero-trust.
• Knowledge of cloud governance, monitoring, FinOps and cost management.
• Experience embedding security into IaC and CI/CD pipelines (DevSecOps).
• Strong communication and collaboration across engineering, platform, and security teams.

Responsibilities

• Build scalable, secure cloud platforms on IaaS/PaaS across GCP, Azure, AWS (focus on GCP/Azure).
• Migrate cloud environments — re-host, re-platform, refactor, and re-architect with automation and security in mind.
• Drive modernization for scalability, performance, and efficiency.
• Partner with engineering and security to implement reference architectures and guardrails.
• Optimize infrastructure for reliability, security, and cost efficiency.
• Implement and maintain cloud security controls and governance guardrails.
• Build secure cloud networking incl. VPN, Interconnect, ExpressRoute, Direct Connect.
• Configure network segmentation and zero-trust controls.
• Secure and operate containers, Kubernetes, serverless, microservices.
• Develop IaC with Terraform (primary), plus other IaC tools.
• Build DevSecOps CI/CD pipelines with security scanning and policy enforcement.
• Implement observability—logging, monitoring, alerting, incident response.
• Evaluate emerging cloud tech to improve reliability and resilience.
• Create platform docs, runbooks, diagrams.
• Support FinOps, tagging standards, resource governance.

Skills

Strong communication

Collaboration skills

Cloud security mindset

Problem solving

DevSecOps mindset

Education

Bachelor's degree in Computer Science/Engineering or related field

Tools

Terraform

Azure Bicep/ARM

Google Config Connector

AWS CloudFormation

Kubernetes (GKE/AKS/EKS)

CI/CD tooling

Job description

Company Overview

KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop, smartphone, wearable device, voice-controlled gadget, flexible screen, VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles, integrated circuits, packaging, printed circuit boards and flat panel displays. The innovative ideas and devices that are advancing humanity all begin with inspiration, research and development. KLA focuses more than average on innovation and we invest 15% of sales back into R&D. Our expert teams of physicists, engineers, data scientists and problem-solvers work together with the world’s leading technology providers to accelerate the delivery of tomorrow’s electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.

Company Overview

KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop, smartphone, wearable device, voice-controlled gadget, flexible screen, VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles, integrated circuits, packaging, printed circuit boards and flat panel displays. The innovative ideas and devices that are advancing humanity all begin with inspiration, research and development. KLA focuses more than average on innovation and we invest 15% of sales back into R&D. Our expert teams of physicists, engineers, data scientists and problem-solvers work together with the world’s leading technology providers to accelerate the delivery of tomorrow’s electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.

Group/Division

The Information Technology (IT) group at KLA is involved in every aspect of the global business. IT’s mission is to enable business growth and productivity by connecting people, process, and technology. It focuses not only on enhancing the technology that enables our business to thrive but also on how employees use and are empowered by technology. This integrated approach to customer service, creativity and technological excellence enables employee productivity, business analytics, and process excellence.

Job Description/Preferred Qualifications

The Cloud Platform Engineer will build, automate, secure, and operate cloud-based platform solutions across multiple cloud platforms — GCP, Azure, and AWS, with GCP and Azure as the preferred focus. This role requires a strong, practical understanding of cloud security, identity and access management, networking, and secure-by-design principles, in addition to IaaS and PaaS best practices.

Responsibilities

• Build scalable, resilient, and secure cloud platforms on IaaS/PaaS across GCP, Azure, and AWS (focus on GCP and Azure).
• Execute cloud migrations — re-host, re-platform, refactor, and re-architect — with automation and security posture improvement.
• Drive application and infrastructure modernization for scalability, performance, and efficiency.
• Partner with engineering and security teams to implement reference architectures, reusable modules, and security guardrails.
• Optimize infrastructure for performance, reliability, security hardening, and cost efficiency.
• Implement and maintain cloud security controls and governance guardrails aligned with industry standards.
• Build secure cloud networking, including VPN, Cloud Interconnect, ExpressRoute, and Direct Connect.
• Configure network segmentation, micro-segmentation, and zero-trust controls.
• Secure and operate containers, Kubernetes (GKE/AKS/EKS), serverless, and microservices
• Develop Infrastructure as Code with Terraform (primary), plus Azure Bicep/ARM, Google Config Connector, and AWS CloudFormation.
• Build DevSecOps CI/CD pipelines with integrated security scanning, policy enforcement, and compliance validation.
• Implement observability — logging, monitoring, alerting, and incident response integration.
• Evaluate emerging cloud and automation technologies to improve reliability, security, and resilience.
• Create platform documentation, runbooks, and architecture/security diagrams.
• Support cloud operating models: FinOps, tagging standards, and resource governance

Minimum Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or a related field with six (6) years of related experience.
• Five (5) years of hands‑on cloud platform engineering or infrastructure experience, including ownership and operation of secure production environments.
• Proficient in at least one major cloud platform — GCP or Azure preferred, with AWS in scope — and strong cross‑cloud fundamentals.
• Solid, practical understanding of cloud networking, cloud security, containers, Kubernetes, serverless technologies, and microservices.
• Hands‑on experience with cloud security controls, including IAM, encryption, key management, network security, and zero‑trust principles.
• Working knowledge of cloud governance, monitoring, observability, FinOps, and cost management.
• Demonstrated experience embedding security into IaC and CI/CD pipelines (DevSecOps).
• Strong communication and collaboration skills, with the ability to work effectively across engineering, platform, and security teams.

Base Pay Range: $110,000.00 - $187,000.00 Annually

Primary Location: USA-CA-Milpitas-KLA

KLA’s total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave.

Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job‑related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.

KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at [e-mail] or at [phone] to request accommodation.