Principal Software Engineer - Cloud Infrastructure

About the Role:

We are seeking a highly skilled and experienced Cloud Infrastructure Engineer L3 with a strong background in both AWS and Azure managed services, as well as on -premise infrastructure. The ideal candidate will have a proven track record of designing, deploying, and managing complex, highly available, and secure mixed infrastructure environments. This role requires expertise in integrated security, authentication, access control, software development practices, and critical data protection for consumer information. You will be a key contributor to our infrastructure team, ensuring the reliability, scalability, and security of our cloud and hybrid systems.

Key Responsibilities:

• Design, implement, and manage highly available, scalable, and secure cloud infrastructure solutions across AWS and Azure, as well as on -premise environments.
  
• Deploy and maintain mixed infrastructure solutions, ensuring seamless integration between on -premise and cloud -based systems.
  
• Implement and enforce robust security measures, including integrated security frameworks, authentication protocols, and access control mechanisms (e.g., AWS IAM policies, Azure RBAC, AWS Network Security Groups, Azure Network Security Groups, WAF).
  
• Develop and maintain infrastructure as code (IaC) using tools like Terraform and Helm for consistent and automated deployments.
  
• Collaborate closely with software development teams to integrate applications with cloud services and ensure infrastructure readiness for new features.
  
• Implement and manage comprehensive data protection strategies for sensitive consumer data, such as electric meter readings and billing information, ensuring compliance and integrity (e.g., AWS KMS, Azure Key Vault).
  
• Design, deploy, and manage monitoring and alerting systems (e.g., Prometheus, Grafana, AWS CloudWatch, Azure Monitor / Log Analytics) to ensure real -time visibility and proactive issue resolution.
  
• Troubleshoot and optimize infrastructure performance, addressing complex issues across network layers (OSI Level 1 -7).
  
• Contribute to the continuous improvement of CI/CD pipelines, automation, and DevOps practices (e.g., AWS CodePipeline/CodeDeploy, Azure DevOps Pipelines).
  
• Ensure adherence to IT Security best practices, including CIS Security Framework deployment, SELinux, SUDO Linux, and Windows AD/Azure Entra Domain Services IAM deployment.
  
• Manage and configure network components such as Firewalls (e.g., AWS Network Firewall, Azure Firewall), Network Security Groups, Load Balancers (L3 -L7 - e.g., AWS ELB/ALB, Azure Load Balancer/Application Gateway), NAT, PAT, and VPNs (e.g., AWS VPN Gateway, Azure VPN Gateway).
  
• Develop and maintain custom WAF rules (e.g., AWS WAF, Azure WAF, ModSecurity) to protect web applications.
  
• Participate in an Agile development environment, contributing to sprint planning, execution, and reviews.
  

• Minimum 5+ years of hands -on experience in cloud infrastructure engineering, with a strong focus on AWS and Azure.
  
• Deep expertise in AWS managed services including but not limited to EC2, S3, VPC, IAM, Lambda, ECS (Elastic Container Service), CodePipeline, CodeDeploy, CloudWatch, KMS, ELB (ALB/NLB), and AWS VPN Gateway.
  
• Strong knowledge of Azure specific managed services including Azure Virtual Machines, Azure Blob Storage, Azure Virtual Network (VNet), Azure Active Directory / Azure RBAC, Azure Functions, Azure Container Instances / Azure App Service (for container deployment), Azure DevOps Pipelines, Azure Monitor / Log Analytics, Azure Key Vault, Azure Load Balancer / Application Gateway, Azure VPN Gateway, Azure Firewall, and Azure Entra Domain Services.
  
• Proven experience in deploying and managing mixed infrastructure environments (on -premise and cloud -based), with a focus on seamless integration and hybrid connectivity.
  
• Solid background in software development, understanding of development methodologies, and ability to collaborate effectively with engineering teams.
  
• Extensive experience with data protection strategies for sensitive consumer data, including encryption, access controls, and compliance.
  
• Expertise in IT Security principles and implementation, including:
  
• CIS Security Framework deployment.
  
• Web Application Firewalls (WAF) in AWS, Azure, and standalone solutions (e.g., ModSecurity with custom rule development).
  
• Network Routing, Firewalls, and VPNs.
  
• Network OSI Model (Level 1 -7) understanding.
  
• SELinux and SUDO Linux deployment.
  
• Windows Active Directory and Azure Entra Domain Services IAM deployment.Experience in LDAP Deployment as a central authentication mechanism for Operating Systems (Windows as AD, Linux as LDAP Auth, Fortinet LDAP auth) and as SSO for WebApp Services.
  
• Experience with Multi -Factor Authentication (MFA) solutions such as Microsoft Authenticator, Google Authenticator, and SMS -based One -Time Passwords (OTP).
  
• Hands -on experience with containerization technologies, specifically Docker and Docker services (e.g., AWS ECS, Azure Container Instances / Azure App Service).
  
• Proficiency in version control systems (e.g., Git) and developing/maintaining CI/CD pipelines (e.g., AWS CodePipeline/CodeDeploy, Azure DevOps Pipelines).
  
• Experience with serverless frameworks and event -driven architecture (e.g., AWS Lambda, Azure Functions).
  
• Strong knowledge of DevOps practices and tools.
  
• Hands -on experience with monitoring and alerting tools such as Prometheus, Grafana, Prometheus Alertmanager (routing alerts via Slack, PagerDuty, email), AWS CloudWatch, and Azure Monitor / Log Analytics.
  
• Experience with infrastructure as code (IaC) tools like Terraform and Helm.
  
• Familiarity with Lightspeed and Udeploy.
  
• Experience working in an Agile development methodology.
  

Preferred Qualifications:

• Relevant cloud certifications (e.g., AWS Certified Solutions Architect - Professional, AWS Certified DevOps Engineer - Professional, Azure Solutions Architect Expert, Azure DevOps Engineer Expert).
  
• Experience with other monitoring tools and observability platforms.
  
• Strong problem -solving skills and the ability to work independently and as part of a team.
  
• Excellent communication and interpersonal skills.