Cloud Engineer

Responsibilities

• Provision and manage AWS accounts, tenant structures, IAM roles and users, cross-account access, and SSO group setup using established processes
• Create, update, and maintain Terraform modules for account setup, networking, identity access, and resource provisioning
• Support secrets management workflows using tools such as AWS Secrets Manager and Vault for third-party integrations
• Apply security and governance standards to cloud resources, including least-privilege access, encryption, and compliance checks
• Troubleshoot and resolve day-to-day AWS support requests across compute, storage, and networking
• Follow runbooks and playbooks for repeatable operational and provisioning tasks
• Escalate complex or unclear issues appropriately while independently owning well-defined work

Requirements

• 5+ years of professional experience in cloud or infrastructure engineering
• Hands-on experience with AWS in a production environment
• Strong working knowledge of compute, storage, networking, and IAM concepts in AWS
• Experience with Infrastructure as Code, ideally Terraform, including editing or creating modules
• Solid understanding of AWS networking fundamentals such as VPCs, subnets, routing, and security groups
• Knowledge of cloud security principles, including least privilege, encryption, and secrets management
• Comfortable working from tickets, playbooks, and documented procedures
• Clear written and verbal communication skills with the ability to collaborate across teams
• Ability to work independently on well-scoped tasks and know when to ask for guidance

Skills

• Experience with Terraform Cloud, Spacelift, or similar centralized IaC platforms (preferred)
• Exposure to multi-account AWS environments such as Landing Zones or Control Tower (preferred)
• Familiarity with containerized workloads, including Kubernetes or EKS (preferred)
• Experience with monitoring and alerting tools such as Grafana or CloudWatch (preferred)
• Exposure to AI/ML or HPC cloud workloads (preferred)