Experience: 5+ Years
Role Overview
We are seeking a Senior Cloud Engineer with deep, hands-on expertise in both AWS and Microsoft Azure. You will design, build, and operate cloud infrastructure platforms that support process automation, data, and application workloads. The ideal candidate thrives in infrastructure-as-code, DevSecOps, and cloud-native environments.
Key Responsibilities
- Design, provision, and manage cloud infrastructure across AWS and Azure using infrastructure-as-code (Terraform, CloudFormation, ARM/Bicep).
- Build and maintain Kubernetes clusters (EKS on AWS, AKS on Azure); manage workload deployments using Helm and Kustomize.
- Architect and implement CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or AWS CodePipeline.
- Design multi-account / multi-subscription landing zones with guardrails, governance, and cost controls.
- Implement cloud networking: VPCs, VNets, Transit Gateways, ExpressRoute/Direct Connect, private endpoints.
- Design and enforce cloud security posture: IAM policies, RBAC, service control policies, security groups, and WAF configurations.
- Set up observability stacks: centralized logging (ELK, CloudWatch, Azure Monitor), metrics (Prometheus/Grafana), and distributed tracing.
- Manage container registries (ECR, ACR) and artifact repositories; enforce image scanning and signing pipelines.
- Support data platform teams deploying Databricks, Kafka, and streaming workloads on cloud.
- Support process automation teams running Camunda 8 / Zeebe clusters on Kubernetes.
- Automate cloud operations: cost optimization, right-sizing, auto-scaling, and FinOps reporting.
- Conduct cloud security reviews, vulnerability assessments, and assist with compliance (SOC 2, ISO 27001, HIPAA).
Required Skills & Experience
- 5+ years of cloud engineering experience across both AWS and Azure environments.
- Expert Terraform skills for multi-cloud IaC; experience with Terraform Cloud / Atlantis.
- Strong Kubernetes expertise: cluster administration, RBAC, network policies, PodDisruptionBudgets, and GitOps (ArgoCD / Flux).
- AWS core services: EC2, EKS, RDS, S3, Lambda, IAM, VPC, Route53, CloudFront, CloudWatch.
- Azure core services: AKS, Azure AD / Entra ID, Azure DevOps, ADLS Gen2, Azure Monitor, Key Vault, App Gateway.
- Proficiency in scripting: Python and/or Bash for automation and tooling.
- Experience with service mesh technologies: Istio, Linkerd, or AWS App Mesh.
- Knowledge of secrets management: HashiCorp Vault, AWS Secrets Manager, Azure Key Vault.
- Understanding of cloud networking: DNS, load balancing, CDN, and hybrid connectivity.
- Familiarity with security scanning tools: Checkov, tfsec, Trivy, or Snyk.
- Experience supporting microservices and event-driven platforms in production cloud environments.