{"id":4064175,"url":"https://alion.io/job/ignition-group-cloud-engineer","title":"Cloud Engineer","company":{"id":2927417,"name":"Ignition Group","domain":"ignitiongroup.co.za","url":"https://alion.io/company/ignitiongroup","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"MCI DirectHire","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Durban, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"FinOps","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Copilot","optional":true}],"status":"live","first_seen_at":"2026-11-11T10:25:04Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T15:09:37Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Description\nTechnical Direction and Design\nDesigns and maintains reusable infrastructure-as-code modules across both cloud platforms, within the architecture standards set by the Group Architect.\nDetermines the technical approach for assigned work, including environment separation, state management and change review.\nBrings unmanaged cloud resources under code, mostly by replacing them during modernisation rather than retrospective cleanup.\nDelivery and Service Operations\nBuilds and maintains deployment pipelines with plan-on-pull-request, apply-on-approval, environment gates and required reviewers.\nUses federated workload identity in place of stored credentials, without exception.\nMaintains the container build and image supply chain: registries, scanning, base image currency.\nOperates the platform services the team builds, including monitoring, capacity, patching, backup verification and recovery testing.\nParticipates in incident response, including a support rotation, and turns causes into changes that prevent recurrence rather than detect it sooner.\nSupports migration and modernisation of workloads: containerising, re-hosting or retiring.\nGovernance, Risk and Compliance\nImplements preventative policy controls that deny genuinely dangerous configurations and audit the rest.\nEnforces naming and mandatory tagging, including the ownership tag without which nothing deploys.\nImplements least-privilege access using managed identities, and removes standing privileged access.\nRemediates security and resilience weaknesses within agreed severity timeframes.\nStakeholder and Business Partnering\nWorks with business technology leads to understand requirements and plan modernisation, with priorities set through the Cloud Team Lead.\nProvides the cloud foundation to engineering teams as documented, consumable interfaces so that application templates bind to it without negotiation.\nSupports Information Security with findings validation and compliance evidence.\nContinuous Improvement and Innovation\nRemoves categories of manual work rather than absorbing them. Operational toil should fall over time, not rise with the size of the estate.\nConsolidates duplicated tooling, pipelines and control planes.\nBuilds cost visibility and drives measurable reduction.\nUses AI assistants as real delivery leverage while remaining accountable for reviewing generated infrastructure code before approval.\nPeople Leadership\nNot applicable: individual contributor role. (Cluster removed per template instruction.)\nJob Requirements\nA relevant tertiary qualification is advantageous\nCertifications such as AZ-104, AZ-400, AWS Solutions Architect Associate or CKA are useful supporting evidence, not a substitute for demonstrated work.\nEssential\n3 to 5 years in a cloud engineering, DevOps or platform role on production systems, with both build and operational responsibility.\nStrong Terraform, having authored reusable modules and managed remote state. Not limited to running pipelines someone else wrote.\nGenuine production depth in one major cloud platform, with real ownership of live workloads. The appointment must cover whichever platform the central cloud team does not already hold, confirmed at the point of hiring.\nWorking knowledge of a second cloud platform, and evidence of having learned a platform to depth before.\nProduction Kubernetes, able to deploy and diagnose workload failures independently.\nHas authored CI/CD pipelines, in any major system.\nIncident response experience, including a support rotation.\nNetworking and cloud identity fundamentals: virtual networks, routing, security groups, DNS, TLS, private connectivity, managed identities, role-based access and federated authentication.\nDocker, Linux and scripting in Bash or Python.\nAdvantageous\nPolicy-as-code and infrastructure security scanning · Open Telemetry and a modern observability stack · serverless and managed container services · CDN and web application firewall platforms · managed database services · cloud cost management and FinOps · regulated environment experience such as PCI-DSS, POPIA or ISO 27001 · formal change, incident and problem management.\nSKILLS AND CAPABILITIES\nInfrastructure as code at module level, including state, drift and safe refactoring across environments and platforms.\nProduction cloud engineering: owns live workloads and understands service limits, failure modes and cost implications.\nSecure pipeline design with meaningful gates, federated identity and artefact promotion, rather than scripts that deploy.\nIncident diagnosis under pressure: restore first, establish cause second, then change something so it does not recur.\nNetwork and connectivity diagnosis end to end, across routing, name resolution, security rules and private connectivity.\nIdentity and secrets engineering, removing standing access and credentials held in code.\nCritical review of AI-generated infrastructure code, particularly in permission scoping, policy definition and private networking where generated code is characteristically wrong.\nDocumentation others actually use.\nDIGITAL AND AI FLUENCY\nAt Ignition Group, digital and AI fluency is not a nice-to-have - it is a core performance requirement for every role, at every level. As AI and automation reshape how work gets done, the ability to work confidently and responsibly alongside these tools is as fundamental as any technical or professional skill.\nWhat this means in practice:\nDigital fluency - navigating and using digital platforms, tools, and systems relevant to your role with confidence and competence\nAI tool adoption - actively using approved AI productivity tools (e.g., Microsoft Copilot) to improve the quality, accuracy, and efficiency of your work\nData literacy - reading, interpreting, and applying data and AI-generated outputs to make better decisions, not replacing your judgement but sharpening it\nAutomation awareness - recognising tasks and processes that can be improved through automation, and contributing to those improvements\nLearning agility - staying curious, upskilling continuously, and adapting as tools and practices evolve\nResponsible and ethical AI use - understanding data privacy obligations, the limits of AI-generated content, and applying sound human judgement at all times","description_format":"text","description_chars":6278,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Design & Creative","Logistics"],"lifecycle":[{"event":"open","at":"2026-11-11T10:25:04Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:3","win:early"],"computed_at":"2026-11-11T18:29:18Z"},"pay":null,"html_url":"https://alion.io/job/ignition-group-cloud-engineer","json_url":"https://alion.io/job/ignition-group-cloud-engineer.json","meta":{"generated_at":"2026-11-11T18:29:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35555,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2927417},"rest":"https://alion.io/mcp/rest/get_company?id=2927417"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fignition-group-cloud-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fignition-group-cloud-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fignition-group-cloud-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ignition-group-cloud-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fignition-group-cloud-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4064175}},{"tool":"search_jobs","arguments":{"company":"ignitiongroup.co.za","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4064175},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}