Cloud Engineer

We are seeking a Cloud Engineer (7+ years) to design, implement, and operate AWS -first cloud platforms with strong hands-on capability in Azure as well. The role focuses on landing zone governance, network architecture, security guardrails, Infrastructure as Code, and SRE & Cost optimization across multi-cloud environment.

What is the Role Expected to Do

Cloud Architecture & Engineering

• Design, implement, and manage AWS Landing Zone architecture, including multi-account setup, organizational units (OUs), and governance using AWS Control Tower or custom frameworks.
• Architect and manage AWS networking including VPC design, subnets, route tables, Internet Gateway, NAT Gateway, and private connectivity.
• Implement and support AWS Transit Gateway for cross-VPC and cross-account connectivity.
• Configure, manage, and troubleshoot Site-to-Site VPN and AWS Direct Connect for hybrid cloud environments.
• Design, implement, and test Disaster Recovery (DR) strategies, conduct DR drills, and ensure RPO/RTO compliance.

Cloud Security

• Define and enforce Service Control Policies (SCPs) and account-level guardrails to ensure security, compliance, and standardization.
• Manage IAM roles, tagging strategies policies, permission boundaries, and cross-account access, ensuring least-privilege security best practices.

Cost Optimization

• Drive AWS & Azure cost optimization initiatives, including monitoring usage, implementing tagging standards, managing Savings Plans and Reserved Instances, and providing cost-saving recommendations based on FinOps model.

Cloud Operations & Reliability

• Deploy, manage, and support Kubernetes clusters on AWS (EKS) and Azure (AKS), includingnode groups/node pools, cluster networking, autoscaling, upgrades, monitoring, and troubleshooting.
• Handle day-to-day cloud operations tasks, including monitoring, incident support, and routine maintenance activities.
• Execute application and database migrations to AWS and Azure, supporting on-premises and cross-cloud migration initiatives.
• Monitor and optimize AWS and Azure environments, manage production incidents, perform RCA, and support SLA-driven operations.

Collaboration & Leadership

• Lead P1 and P2 incident resolution, perform root cause analysis (RCA), and drive corrective actions to prevent recurrence.
• Collaborate effectively with cross-functional teams during migrations and production activities to ensure smooth execution and minimal impact.
• Contribute to cloud standards, documentation, and best practices.

Required Skills & Qualifications

Technical Skills

• 7+ years of experience in cloud engineering.
• Strong hands-on experience with Azure and AWS.
• IaC: Terraform (mandatory); scripting with PowerShell and/or Bash/Python.
• Strong networking fundamentals across cloud + hybrid (routing, DNS, VPN, ExpressRoute/DX, firewalls, private connectivity)
• Observability and ops: Azure Monitor/Log Analytics + CloudWatch; incident management and RCA discipline.
• Security fundamentals: IAM/RBAC, least privilege, encryption, audit logging.

Soft Skills

• Strong problem-solving and troubleshooting skills.
• Good communication and documentation abilities.
• Ability to work independently and in cross-functional teams.

Qualifications

• 7+ years of industry experience on AWS.
• Certifications:
• AWS: Solutions Architect Associate/Professional (preferred)
• Azure: AZ-104 (preferred), AZ-305 (nice-to-have)
• Experience with Kubernetes (AKS/EKS).

Experience with security frameworks