Cloud Engineer

Job Summary

Plutus21 is seeking a Cloud Engineer to join our core platform team and take ownership of deployment, tenant isolation, and platform operations. The Cloud Engineer will package and operate the platform across multiple client environments, whether hosted by Plutus21 or within a client's own cloud, while keeping client data secure and isolated. This role works closely with the Principal Platform Engineer and the AI Engineer and is essential to scaling the platform across clients and products.

Key Responsibilities

• Package the platform as a containerized deployment unit per client, with identical code running in every environment.
• Build and maintain infrastructure-as-code modules using Terraform or Pulumi, starting with AWS and designed to extend to other cloud providers.
• Keep stateful components portable, including PostgreSQL, S3-compatible object storage, OIDC identity, and pluggable secrets management.
• Implement and test tenant isolation, including isolation between sub-tenants within a single client.
• Control data egress at the infrastructure level so that only declared, client-authorized outbound connections are permitted.
• Operate hybrid deployments in client-hosted environments, including outbound-only connections to the control plane for releases and health monitoring, with no transfer of client data.
• Define and support the shared-responsibility model and service level agreements for client-hosted environments.
• Manage upgrades and releases across multiple environments within a supported-version window, without configuration drift.
• Establish baseline security and observability, including SSO, audit logging, encryption, monitoring, and alerting.
• Write clear design notes and runbooks, and document decisions before implementation begins.

Qualifications

• Proven experience owning Terraform or Pulumi codebases in production, including reusable modules and deliberate management of state and drift.
• Hands-on experience running Kubernetes or an equivalent orchestration platform across multiple environments.
• Deep expertise in at least one major cloud provider, with AWS strongly preferred, and an understanding of how to avoid vendor lock-in where it matters.
• Experience operating PostgreSQL and object storage in production, including backups, restores, and upgrades.
• Strong understanding of tenant isolation, private networking, egress control, and secrets handling, with the ability to implement them.
• Experience with CI/CD and versioned releases across many environments without configuration drift.
• Strong written communication skills, with the ability to produce clear design notes and runbooks.
• Experience deploying software into customers' own cloud accounts is a plus.
• Experience in regulated environments, such as financial data or privacy-sensitive settings, or with SOC 2 readiness is a plus.
• Experience with a second cloud provider such as GCP or Azure is a plus.
• Familiarity with GitOps and policy-as-code is a plus.
• Experience operating platforms that run AI or LLM workloads is a plus.