Cloud Engineer

As a Cloud Engineer youll help design automate and optimize cloud infrastructure supporting our products and internal systems. Youll work alongside talented engineers across Security Quality Assurance and Application teams to keep our systems fast

reliable and secure.

Our tech stack includes:

• Governance: Control Tower (70 AWS Accounts) Identity Center OIDC SCPs
• Hosting Services: ECS on Fargate EC2 Lambda
• Storage: S3 RDS Aurora DynamoDB
• Data Visualization & Processing: Athena Glue Kinesis QuickSight
• Security Tooling: Security Hub GuardDuty Inspector Splunk
• Networking: AWS Transit Gateway (Hub and Spoke Network) Palo Alto CN NGFWs AWS WAF
• Infrastructure as Code: CDK (TypeScript) Terraform
• CI/CD: GitHub Actions Bitbucket Pipelines

What Youll Do

• Design build and maintain AWS infrastructure with scalability reliability and cost efficiency in mind
• Develop and maintain Infrastructure as Code (IaC) using CDK and Terraform
• Partner with Product and Application teams to support cloud-native architectures and deployments
• Monitor and optimize system performance uptime and cost
• Strengthen our cloud security posture and automate compliance where possible
• Troubleshoot and resolve issues across complex distributed environments
• Collaborate closely with QA Security and Application teams to streamline cloud workflows

• 35 years of experience managing and engineering solutions in AWS
• Strong understanding of core AWS services (ECS EC2 Lambda RDS S3 IAM etc.) Hands-on experience with Terraform or AWS CDK
• High level of proficiency in scripting or programming (Python TypeScript Bash etc.)
• Solid understanding of networking concepts and cloud security best practices
• Experience with CI/CD tooling such as GitHub Actions or Bitbucket Pipelines

Nice-to-Haves

• AWS Certifications (Solutions Architect SysOps or DevOps Engineer)
• Experience with observability tooling (CloudWatch Datadog Splunk OpenTelemetry)
• Knowledge of security principles such as Zero Trust Architecture (ZTA) and Principle of Least Privilege (PoLP)
• Familiarity with encryption strategies for data at rest and in transit (e.g. KMS TLS customer-managed keys envelope encryption)
• Awareness of compliance frameworks (PCI-DSS SOC 2 HIPAA) and how they affect data platform design