Cloud Engineer

Responsibilities

Must -Have Responsibilities

• Design, deploy, and operate containerized workloads on Amazon EKS and ECS using platform engineering best practices.
  
• Build, manage, and optimize CI/CD pipelines using GitHub Actions, AWS native CI/CD services, and GitOps workflows with Argo CD.
  
• Implement and manage Infrastructure as Code using Terraform or AWS CloudFormation for consistent and auditable deployments.
  
• Configure and operate AWS networking components including VPCs, Transit Gateway, and Site -to -Site VPN connectivity.
  
• Monitor, troubleshoot, and improve system reliability using metrics, logs, and traces across cloud and Kubernetes environments.
  
• Collaborate with application and security teams to ensure scalable, secure, and compliant cloud deployments.
  
• Implement cost optimization strategies in AWS by monitoring usage, recommending right -sizing, reserved instances, savings plans, and resource scheduling.
  
• Ensure AWS security and compliance using services like AWS IAM, AWS KMS, AWS Secrets Manager, Security Hub, GuardDuty, and implement security best practices such as least privilege, encryption, and auditing.
  

Skills & Experience:

Must -Have Skills

• Minimum 3 years of hands -on experience in AWS, with strong understanding of compute, networking, IAM, and managed services.
  
• Hands -on experience with Amazon EKS and/or ECS in production environments.
  
• Practical knowledge of CI/CD pipelines using GitHub Actions and AWS CI/CD services (CodePipeline, CodeBuild, CodeDeploy).
  
• Experience with GitOps tools, specifically Argo CD, for Kubernetes deployments.
  
• Strong experience with Infrastructure as Code using Terraform or AWS CloudFormation.
  
• Working knowledge of AWS networking, including VPC design, Transit Gateway, and Site -to -Site VPN.
  
• Basic operational experience with PostgreSQL and MongoDB databases.
  
• Proficiency in Bash scripting for automation and operational tasks.
  
• Experience implementing observability using Prometheus, Grafana, AWS CloudWatch, and OpenTelemetry.
  
• AWS Security skills, including IAM, KMS, Secrets Manager, GuardDuty, Security Hub, Config, and best practices for encryption, access control, and auditing.
  
• AWS Cost Optimization skills, including resource right -sizing, reserved instances, savings plans, cost monitoring with Cost Explorer, and budgeting/alerts.
  

Good -to -Have Skills

• Experience with CNCF ecosystem tools such as Helm, Kubernetes Operators, cert -manager, external -dns, Fluent Bit, or Open Policy Agent (OPA).
  
• Familiarity with service mesh concepts (Istio, Linkerd) and Kubernetes networking fundamentals.
  
• Exposure to modern AWS concepts such as AWS Load Balancer Controller, IRSA, EKS add -ons, Graviton, and AWS Managed Prometheus/Grafana.
  
• Understanding of security automation using IaC and AWS Config rules.
  
• Exposure to OpenTelemetry -based distributed tracing and SRE concepts such as SLIs, SLOs, and error budgets.
  
• Experience with cost management and FinOps practices in AWS.