Staff Cloud Engineer

Cloud Architecture & Infrastructure

Design, architect, and implement scalable, secure, and highly available cloud infrastructure on AWS across multi-account, multi-region environments.

Define and enforce cloud architecture standards, best practices, and governance policies using AWS Organizations, Control Tower, and SCPs.

Build and maintain Infrastructure as Code (IaC) using Terraform and AWS CloudFormation - writing reusable modules consumed across all product teams.

Improve and optimize cloud environments for cost, performance, and reliability - owning FinOps practices including Savings Plans, Spot strategy, and Graviton adoption.

Collaborate with engineering, data, and security teams to build resilient distributed systems.

Drive innovation and continuous improvement initiatives across the platform.

Design, deploy, and manage production EKS clusters at multi-tenant financial-services scale.

Plan and execute cluster upgrades, patching, and Kubernetes version lifecycle management with zero customer impact.

Build and maintain internal Helm chart libraries and GitOps-driven cluster configuration using ArgoCD or Flux.

Implement zero-trust network principles and enforce IAM least-privilege across all AWS accounts.

Drive SRE practices: define and enforce SLOs for EKS, API Gateway etc.

Lead incident response, postmortem analysis, and blameless RCA processes for platform-level outages.

Build chaos engineering exercises and disaster recovery testing across availability zones and regions.

Partner with software engineering teams to deliver end-to-end solutions from design through production.

Evaluate new AWS services and open-source tooling to continuously improve infrastructure capabilities.

Required Qualifications

Strong, hands-on experience with AWS cloud services: EC2, VPC, IAM, EKS, S3, CloudWatch, API Gateway, Route 53, and more.

Proven experience operating Amazon EKS in production: cluster lifecycle, RBAC, IRSA, node groups, and autoscaling.

Proficiency in Infrastructure as Code with Terraform and AWS CloudFormation.

Solid understanding of containerization: Docker, Kubernetes architecture, and container lifecycle management.

Experience with monitoring and logging tools: Prometheus, Grafana, Dynatrace, OpenSearch, ELK/Loki.

Strong Linux/Unix systems administration and scripting in Bash, Python, or similar.

Deep knowledge of cloud security best practices: IAM, RBAC, secrets management, and network security.

Solid networking fundamentals: VPCs, subnets, load balancing, DNS, and Kubernetes ingress controllers.

Ability to troubleshoot distributed systems and debug complex production issues at scale.

Strong problem-solving skills with the ability to drive technical decisions across teams in a fast-paced environment.

Preferred Skills

AWS Certifications: Solutions Architect Professional or DevOps Engineer Professional.

Kubernetes Certifications: CKA or CKAD.

Experience with Helm and GitOps tools (ArgoCD, Flux).

Experience with Rancher/ArgoCD or similar tools for EKS node provisioning.

Exposure to microservices architecture and distributed systems at scale.

Experience with AWS API Gateway and Lambda Authorizers for JWT/OIDC-based auth flows.

Background in cost optimization and performance tuning (Graviton, Spot, Savings Plans).

Familiarity with CIAM/identity federation: OIDC, OAuth2, SAML, Auth0 integration.

Understanding AI/ML infrastructure: model training pipelines, deployment on EKS, and model monitoring.