Senior Cloud / TechOps Engineer

Project description

The Cloud Engineering team is responsible for managing, supporting, and continuously improving our cloud and hybrid infrastructure platforms.
We are looking for a strong hands-on Senior Cloud Engineer with deep AWS expertise to design, implement, secure, automate, and operate highly available cloud infrastructure across internal and client-facing environments.
AWS will be the primary cloud platform for this role. The engineer should also have a good working knowledge of other major cloud platforms such as Microsoft Azure and/or Google Cloud Platform (Google Cloud Platform), as some of our clients operate on these platforms or have hybrid/on-premises environments that integrate with our services.
The role focuses on production reliability, cloud infrastructure, automation, observability, security, incident management, disaster recovery, performance, cost optimization, and continuous improvement.
This is not a traditional infrastructure support role. The successful candidate is expected to use engineering and automation to reduce operational toil, eliminate recurring incidents, improve platform reliability, and continuously enhance operational efficiency.

Responsibilities

AWS Cloud Infrastructure

Design, deploy, manage, and troubleshoot highly available AWS infrastructure using Infrastructure as Code.

Strong hands-on experience with:

EC2, ECS, EKS, S3, VPC, IAM, Lambda, EventBridge, AWS Batch, MSK/Kafka, OpenSearch, Route 53, Load Balancers, Auto Scaling, Secrets Manager, KMS and CloudWatch.

Design and manage AWS networking including:

Transit Gateway

PrivateLink

VPN

NAT Gateway

Direct Connect

Security Groups

Network ACLs

DNS and routing

Perform infrastructure lifecycle management, patching, software upgrades, and technology refresh activities.

Support cloud migration, modernization, and application onboarding initiatives.

Recommend architectural improvements to enhance reliability, scalability, security, performance, and operational efficiency.

Hybrid & Multi-Cloud

Support AWS as the primary cloud platform, while collaborating with teams supporting Azure, Google Cloud Platform, and client-specific cloud environments.

Working knowledge of core Azure and/or Google Cloud Platform services including compute, networking, storage, identity, security, and monitoring.

Troubleshoot connectivity and integration issues across AWS, other public clouds, and on-premises infrastructure.

Understand hybrid connectivity patterns including VPN, dedicated connectivity, DNS, routing, identity federation, and secure data integration.

Participate in client technical discussions involving non-AWS cloud environments where required.

Apply consistent operational, security, reliability, and governance standards across hybrid environments.

AWS depth is mandatory. Azure/Google Cloud Platform experience is an advantage and should not substitute for strong AWS production experience.

Automation & Infrastructure as Code

Develop and maintain reusable Terraform modules and infrastructure automation frameworks.

Automate infrastructure provisioning, configuration, patching, compliance checks, and operational activities.

Develop automation using Python and/or Shell scripting.

Build self-service capabilities to reduce manual operational activities.

Implement automated remediation and self-healing capabilities where appropriate.

Continuously identify opportunities to eliminate operational toil through automation.

CI/CD & DevOps

Build and maintain CI/CD pipelines supporting infrastructure and application deployments.

Integrate infrastructure provisioning and operational processes into DevOps workflows.

Support containerized platforms using Docker and Kubernetes/EKS.

Implement automated deployment, validation, and rollback mechanisms.

Work closely with development teams to improve deployment reliability and release engineering.

Support adoption of DevOps and SRE practices.

Observability & Monitoring

Implement and maintain comprehensive monitoring, logging, alerting, and observability.

Strong experience with Splunk and AWS CloudWatch.

Support OpenTelemetry and distributed tracing.

Develop operational dashboards, alerts, and health indicators.

Proactively identify availability, performance, capacity, and reliability risks.

Continuously improve monitoring and alerting to improve incident detection and reduce noise.

Security & Compliance

Implement AWS security best practices including IAM, least privilege, encryption, secrets management, and network security.

Support cloud security hardening and vulnerability remediation.

Participate in security audits, vulnerability assessments, and closure of audit findings.

Ensure cloud infrastructure complies with organizational, client, regulatory, and security requirements.

Implement and maintain appropriate security guardrails and controls.

Work closely with Security teams to identify and remediate cloud security risks.

Disaster Recovery & Resilience

Design, implement, and maintain AWS disaster recovery solutions.

Participate in DR and failover testing and validation.

Ensure infrastructure meets defined RTO and RPO requirements.

Identify and remediate BCP/DR gaps.

Support multi-AZ and multi-region resilience initiatives.

Develop and maintain DR procedures, runbooks, and recovery documentation.

Performance, Capacity & AWS Cost Optimization

Monitor infrastructure capacity and performance and proactively identify bottlenecks.

Conduct performance and capacity analysis and recommend improvements.

Support scalability and resilience engineering initiatives.

Identify and implement AWS cost optimization opportunities.

Apply right-sizing, autoscaling, resource optimization, scheduling, and architectural improvements to reduce cloud spend.

Identify idle and underutilized resources.

Work with Architecture and Engineering teams to improve the cost/performance profile of the platform.

Production Operations & Reliability

Own the operational health, availability, performance, and reliability of AWS cloud environments.

Lead resolution of high-severity production incidents, including participation in client bridge calls where required.

Troubleshoot complex infrastructure, networking, application, and cloud-platform issues.

Lead technical Root Cause Analysis (RCA) for major incidents and drive corrective and preventive actions through to completion.

Identify recurring incidents and implement permanent engineering solutions to prevent repeat failures.

Establish and maintain cloud operational standards, guardrails, runbooks, and best practices.

Ensure cloud service requests and operational activities are completed within defined SLAs.

Support Change Management processes and ensure changes are implemented safely.

Participate in on-call rotations and critical production/weekend support activities.

10. Collaboration & Governance

Work closely with Development, DBA, Security, Network, Architecture, DevOps, Product, and Service Management teams.

Support application onboarding and cloud adoption initiatives.

Participate in technical design and architecture reviews.

Create and maintain architecture diagrams, operational documentation, standards, and runbooks.

Support client-facing technical discussions and production escalations.

Participate in project planning, technology evaluations, and continuous improvement initiatives.

Skills

Must have

10+ years of IT/infrastructure engineering experience, with at least 5+ years of strong hands-on AWS experience.

Deep hands-on experience designing, implementing, troubleshooting, and supporting production AWS environments.

Strong knowledge of Linux/Unix administration, OS configuration, troubleshooting, and shell scripting.

Strong understanding of AWS networking, security, cloud architecture, and high-availability principles.

Strong experience with Terraform / Infrastructure as Code.

Strong scripting and automation skills using Python and/or Shell.

Experience with Docker and Kubernetes/EKS.

Experience with CI/CD, DevOps, and SRE practices.

Experience with monitoring, logging, and observability platforms such as Splunk, CloudWatch, and OpenTelemetry.

Strong experience managing high-severity production incidents and performing deep technical RCA.

Experience with DR, BCP, RTO/RPO, and resilience solutions.

Experience with messaging middleware, particularly IBM MQ, ActiveMQ, or JMS.

Experience with cloud security, vulnerability remediation, audit, and compliance.

Experience with AWS cost optimization / FinOps.

Working knowledge of Azure and/or Google Cloud Platform.

Experience working in regulated, enterprise, and client-facing environments.

Strong communication and stakeholder-management skills.

Ability to work across Application, Infrastructure, Architecture, Security, Network, DBA, and Product teams.

Willingness to participate in on-call rotations and critical production support activities.

Tools & Technologies

Primary Cloud - AWS

EC2, ECS, EKS, S3, VPC, IAM, Bedrock, Lambda, EventBridge, AWS Batch, MSK/Kafka, OpenSearch, CloudWatch, Route 53, Load Balancers, Auto Scaling, Secrets Manager, KMS

Other Cloud Platforms

Microsoft Azure and/or Google Cloud Platform (Google Cloud Platform) - working knowledge of compute, networking, storage, IAM, security, monitoring, and hybrid connectivity.

Infrastructure & Automation

Terraform, Ansible, Python, Shell Scripting

DevOps & Containers

GitHub, GitHub Actions, Docker, Kubernetes/EKS, CI/CD

Observability

Splunk, CloudWatch, OpenTelemetry

Middleware

IBM MQ, ActiveMQ/JMS, Kafka/MSK

ITSM & Collaboration

ServiceNow, Jira, Confluence

AI & Engineering Productivity

Experience with GenAI tools such as GitHub Copilot, Claude, or equivalent.

Ability to use AI to accelerate infrastructure automation, troubleshooting, documentation, CI/CD, monitoring, and operational processes.

3 days in client office per week required

Nice to have

AWS Solutions Architect / DevOps Engineer certification.

Strong SRE experience.

Automated remediation / self-healing infrastructure.

Multi-region AWS architecture.

Hybrid cloud and on-premises integration experience.

Experience migrating legacy applications/infrastructure to AWS.

Strong experience with ECS, EKS, MSK/Kafka, OpenSearch, and event-driven architectures.

PostgreSQL administration, upgrades, and migrations.

Demonstrated delivery of significant AWS cost reductions.

OpenTelemetry and distributed tracing experience.

Experience using GenAI for engineering and operational productivity.

Experience operating large-scale, business-critical, client-facing platforms.

Other

Languages

English: B2 Upper Intermediate

Seniority

Senior