Cloud Engineer

Job Description

Cloud Infrastructure Management

- Design, deploy, and manage AWS cloud infrastructure including EC2, S3, VPC, RDS, and Lambda

- Implement and maintain AWS services such as ECS, EKS, CloudFront, Route 53, and DynamoDB

- Monitor cloud resources and optimize for performance, cost-efficiency, and scalability

- Implement disaster recovery and high availability solutions using AWS best practices

- Manage multi-account AWS environments using AWS Organizations and Control Tower

Automation & DevOps

- Develop Infrastructure as Code (IaC) using AWS CloudFormation, Terraform, or AWS CDK

- Implement CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, Jenkins, or GitHub Actions

- Automate deployment, configuration, and management tasks using AWS CLI, Python (Boto3), or Bash scripting

- Support continuous integration and continuous delivery practices across development teams

- Implement automated testing and validation of infrastructure changes

Security & Compliance

- Implement AWS security best practices including IAM policies, roles, and permissions

- Configure security groups, NACLs, AWS WAF, and Shield for network protection

- Ensure compliance with industry standards and regulatory requirements (e.g., SOC 2, ISO 27001, GDPR)

- Monitor security threats using AWS GuardDuty, Security Hub, and CloudTrail

- Manage encryption, AWS KMS, Secrets Manager, and certificate management

- Conduct regular security audits and vulnerability assessments

Collaboration & Support

- Partner with development teams to architect cloud-native and serverless applications

- Provide technical guidance and mentorship to team members

- Troubleshoot and resolve cloud infrastructure and application issues

- Document architecture diagrams, runbooks, and standard operating procedures

- Participate in on-call rotation for production support and incident response

- Collaborate with partners and alliances to deliver integrated solutions

Technical Skills

- AWS Services: Deep knowledge of core AWS services (EC2, S3, VPC, RDS, Lambda, ECS/EKS, CloudWatch)

- Scripting & Automation: Proficiency in Python, Bash, PowerShell, or similar languages

- Infrastructure as Code: Hands-on experience with CloudFormation, Terraform, or AWS CDK

- CI/CD Tools: Experience with AWS CodePipeline, Jenkins, GitLab CI, or GitHub Actions

- Containerization: Knowledge of Docker, Kubernetes, Amazon ECS, and Amazon EKS

- Networking: Strong understanding of VPC, subnets, routing, VPN, Direct Connect, and load balancing

- Security: Experience with IAM, Security Groups, KMS, Secrets Manager, and AWS security services

- Monitoring & Logging: Proficiency with CloudWatch, CloudTrail, X-Ray, and third-party monitoring tools

- Databases: Familiarity with RDS, DynamoDB, Aurora, and database migration strategies