Job Summary
We are looking for an experienced Cloud Engineer to design, implement, maintain, and optimize secure, reliable, and scalable cloud infrastructure. The role will focus on AWS cloud infrastructure, Infrastructure as Code (IaC), cloud networking, security, automation, monitoring, and operational support.
The successful candidate should have strong hands-on experience with AWS, Terraform, AWS CDK, Linux, networking, containers, and cloud security, with the ability to troubleshoot complex infrastructure issues and automate cloud operations.
Key Responsibilities
1. Cloud Infrastructure
- Design, deploy, and maintain AWS infrastructure across production and non-production environments.
- Manage AWS services including VPC, EC2, ECS/EKS, S3, RDS, IAM, KMS, Lambda, CloudWatch, load balancers, and other cloud services.
- Design highly available, scalable, secure, and cost-effective cloud architectures.
- Perform capacity planning, performance optimization, and cloud cost optimization.
2. Infrastructure as Code — Terraform & AWS CDK
- Develop, maintain, and manage cloud infrastructure using Terraform and AWS CDK.
- Create reusable Terraform modules and AWS CDK constructs for standardized infrastructure deployment.
- Manage infrastructure across multiple environments such as development, test, staging, and production.
- Implement infrastructure version control, code review, automated validation, and deployment through CI/CD pipelines.
- Maintain Terraform state, providers, modules, dependencies, and infrastructure lifecycle management.
- Use AWS CDK to define and provision AWS resources using supported programming languages.
- Establish Infrastructure-as-Code standards, best practices, and governance.
- Gradually automate existing manually configured infrastructure and reduce configuration drift.
3. Cloud Networking
- Design and troubleshoot AWS networking including VPCs, subnets, routing, security groups, NACLs, Transit Gateway, Direct Connect, VPN, DNS, and load balancing.
- Design private cloud architectures using VPC endpoints and private connectivity.
- Integrate AWS environments with enterprise data centers and corporate networks.
- Troubleshoot connectivity, routing, latency, and availability issues.
4. Security & Identity
- Implement AWS security best practices including IAM, KMS, encryption, network segmentation, security groups, and private endpoints.
- Integrate AWS environments with enterprise identity systems such as Active Directory, SSO, and SAML.
- Support certificate management, vulnerability remediation, security monitoring, and compliance requirements.
- Ensure infrastructure deployed through Terraform and AWS CDK follows organizational security standards.
5. Containers & Platform Engineering
- Deploy and operate containerized workloads using Amazon ECS, EKS/Kubernetes, or equivalent platforms.
- Manage container networking, service discovery, load balancing, scaling, and observability.
- Work with Docker, Kubernetes, Helm, and service-mesh technologies where required.
6. Monitoring & Observability
- Implement and maintain monitoring, logging, metrics, alerting, and dashboards.
- Work with CloudWatch, Prometheus, Grafana, OpenTelemetry, ELK/OpenSearch, or equivalent technologies.
- Establish infrastructure health indicators and support root-cause analysis of production incidents.
7. Reliability & Operations
- Maintain production cloud environments and achieve agreed availability and performance targets.
- Participate in incident response, problem management, disaster recovery, and business-continuity activities.
- Develop operational procedures, runbooks, and recovery procedures.
- Perform infrastructure upgrades, migrations, and controlled changes.
8. CI/CD & Automation
- Integrate Terraform and AWS CDK deployments with CI/CD pipelines.
- Implement automated infrastructure validation, testing, deployment, and rollback.
- Develop automation using Python, Bash, or other appropriate scripting languages.
- Identify repetitive operational activities and automate them.
9. Documentation & Collaboration
- Maintain architecture diagrams, Infrastructure-as-Code documentation, configuration standards, and operational procedures.
- Work closely with application developers, network engineers, cybersecurity teams, and system administrators.
- Participate in technical design and architecture reviews.
Required Qualifications & Experience
- Degree or diploma in Computer Science, Information Technology, Engineering, or a related discipline.
- 3+ years of hands-on experience in cloud infrastructure engineering, preferably AWS.
- Strong hands-on experience with Terraform and Infrastructure as Code.
- Hands-on experience with AWS CDK and AWS resource provisioning.
- Strong understanding of AWS infrastructure and networking services.
- Strong Linux administration and troubleshooting skills.
- Good understanding of TCP/IP, DNS, routing, VPN, load balancing, and firewalls.
- Experience with containers and Docker; Kubernetes/EKS or ECS experience is an advantage.
- Experience with cloud monitoring, logging, and observability.
- Understanding of IAM, encryption, cloud security, and network security.
- Experience with Python, Bash, or similar scripting languages.
- Experience supporting production environments.
Preferred Skills
- AWS certifications such as Solutions Architect, SysOps Administrator, or Advanced Networking.
- Experience with both Terraform and AWS CDK in enterprise production environments.
- Experience with AWS Direct Connect, Transit Gateway, VPN, PrivateLink, and hybrid-cloud architectures.
- Experience with Kubernetes/EKS, ECS, Helm, Istio, or service-mesh technologies.
- Experience with Prometheus, Grafana, OpenTelemetry, ELK, or OpenSearch.
- Experience integrating AWS with enterprise Active Directory/SSO environments.
- Experience with GitLab CI/CD or similar DevOps platforms.
- Experience designing highly available and disaster-recovery architectures.
Key Competencies
- Strong infrastructure design and troubleshooting skills.
- Strong Infrastructure-as-Code and automation mindset.
- Ability to troubleshoot across cloud, network, Linux, container, and application layers.
- Strong ownership of production infrastructure.
- Ability to design reusable and maintainable infrastructure rather than relying on manual configuration.
- Good communication and documentation skills.
- Ability to work independently and collaboratively across technical teams.
- Willingness to continuously learn new cloud and infrastructure technologies.
Technology Environment
Cloud: AWS
Infrastructure as Code: Terraform, AWS CDK, CloudFormation
Compute: EC2, ECS, EKS, Lambda
Networking: VPC, Transit Gateway, Direct Connect, VPN, NLB/ALB, VPC Endpoints
Security: IAM, KMS, Security Groups, NACL, PrivateLink
Containers: Docker, Kubernetes, Helm
Monitoring: CloudWatch, Prometheus, Grafana, OpenTelemetry
Logging: ELK / OpenSearch
Operating Systems: Linux / Windows
Automation: Python, Bash
CI/CD: GitLab CI/CD