Cloud Engineer

Description

As a Cloud Engineer, you’ll help design, automate, and optimize cloud infrastructure supporting our products and internal systems. You’ll work alongside talented engineers across Security, Quality Assurance, and Application teams to keep our systems fast,

Reliable, And Secure.

Our Tech Stack Includes:

• Governance: Control Tower (70+ AWS Accounts), Identity Center + OIDC, SCPs
• Hosting Services: ECS on Fargate, EC2, Lambda
• Storage: S3, RDS, Aurora, DynamoDB
• Data Visualization & Processing: Athena, Glue, Kinesis, QuickSight
• Security Tooling: Security Hub, GuardDuty, Inspector, Splunk
• Networking: AWS Transit Gateway (Hub and Spoke Network), Palo Alto CN NGFWs, AWS WAF
• Infrastructure as Code: CDK (TypeScript), Terraform
• CI/CD: GitHub Actions, Bitbucket Pipelines

What You’Ll Do

• Design, build, and maintain AWS infrastructure with scalability, reliability, and cost efficiency in mind
• Develop and maintain Infrastructure as Code (IaC) using CDK and Terraform
• Partner with Product and Application teams to support cloud-native architectures and deployments
• Monitor and optimize system performance, uptime, and cost
• Strengthen our cloud security posture and automate compliance where possible
• Troubleshoot and resolve issues across complex distributed environments
• Collaborate closely with QA, Security, and Application teams to streamline cloud workflows

Requirements

• 3–5 years of experience managing and engineering solutions in AWS
• Strong understanding of core AWS services (ECS, EC2, Lambda, RDS, S3, IAM, etc.)• Hands-on experience with Terraform or AWS CDK
• High level of proficiency in scripting or programming (Python, TypeScript, Bash, etc.)
• Solid understanding of networking concepts and cloud security best practices
• Experience with CI/CD tooling such as GitHub Actions or Bitbucket Pipelines

Nice-To-Haves

• AWS Certifications (Solutions Architect, SysOps, or DevOps Engineer)
• Experience with observability tooling (CloudWatch, Datadog, Splunk, OpenTelemetry)
• Knowledge of security principles such as Zero Trust Architecture (ZTA) and Principle of Least Privilege (PoLP)
• Familiarity with encryption strategies for data at rest and in transit (e.g., KMS, TLS, customer-managed keys, envelope encryption)
• Awareness of compliance frameworks (PCI-DSS, SOC 2, HIPAA) and how they affect data platform design