SaaS Cloud Engineer

GE Vernova's GridOS Platform Engineering team is building the next generation of SaaS reliability for critical energy infrastructure. The SaaS Cloud Engineer sits at the heart of our System Reliability Engineering (SRE) team, owning the end-to-end cloud provisioning lifecycle for every customer environment - from Day 0 bootstrap through Day 2 continuous operations. You will work alongside Platform SRE, Observability, Production DevOps, and SecOps engineers to ensure that GridOS SaaS products meet the highest standards of availability, security, and cost efficiency across our US and international customer base.

Job Description

Roles and Responsibilities

- Provision & Bootstrap

Own per-customer AWS account provisioning;

Automate account bootstrap workflows using Infrastructure as Code (Terraform / AWS CloudFormation) and CI/CD pipelines (GHA / ArgoCD).

Implement and maintain Cyber Guardrails aligned to GESOS standards, including jumphost configuration, IAM policies, and VPC networking.

Deploy standardized cloud infrastructure baselines: AWS CloudTrail, CloudWatch, GuardDuty, Security Hub, and Config Rules.

Configure DNS, network connectivity, and cross-account trust relationships for each customer environment.

- Deploy, Scale & Validate

Collaborate with Platform SRE to define sizing, scaling, and SLO baselines for each customer workload.

Support progressive delivery pipelines (blue/green, canary) to ensure zero-downtime deployments.

Integrate cloud-native observability hooks (CloudWatch, synthetic monitors) for new customer environments.

Assist with acceptance testing validation gates before production cutover.

- Secure, Operate & Optimize

Drive FinOps practices: right-size resources, implement savings plans, and produce monthly cost reports per customer using AWS Cost Explorer.

Maintain cloud security posture: apply CVE patches, respond to compliance and audit requirements in coordination with SecOps.

Participate in on-call rotations for incident response (Level 1/2), root cause analysis (RCA), and BC/DR exercises.

Continuously improve account automation, reducing toil through scripting (Python, Bash) and runbook codification.

Monitor FinOps KPIs and flag anomalies proactively to the SRE Lead.

Required Experience

3-5 years of hands-on experience in cloud infrastructure, SRE, or DevOps engineering roles.

AWS experience using EC2, EKS, S3, VPC, IAM, CloudTrail, Cloud Watch, Guard Duty, Organizations, Control Tower.

Experience writing Infrastructure as Code using Terraform or AWS Cloud Formation or any programming languages like Python or Java, etc.

Working knowledge of CI/CD pipelines - GitHub Actions (GHA) and/or ArgoCD.

Scripting fluency in Python and/or Bash for automation and operational tooling.

Knowledge and awareness with cloud security best practices: IAM least privilege, security group design, encryption at rest/in-

transit.

Exposure to FinOps concepts - cost allocation tagging, savings plans, Reserved Instances analysis.

Fluent in English.

Nice to Have

Familiarity with Cyber Security Standard and Policies in regulated environments.

Knowledge of GovCloud or regulated-industry compliance (FedRAMP, NERC CIP, SOC 2).

AWS certifications: Solutions Architect (Associate or Professional), DevOps Engineer Professional.

Key Skills & Technologies

AWS (EKS, IAM, CloudTrail, CloudWatch, RDS, MSK, SQS, S3, etc.)

Infrastructure as Code - Terraform

Decent knowledge on Kubernetes Concepts and EKS/Rancher

CI/CD - Jenkins, GitHub Actions

Scripting - Python / Bash

FinOps / Cost Explorer

Incident Response

Compliance & SecOps

Education Qualification

Bachelor's degree in computer science

Business Acumen:

Strong oral and written communication skills

Strong business analysis and problem solving skills

Proactively engages with cross-functional teams to resolve issues and design solutions using critical thinking and analytical skills and best practices

Ability to interact at all levels of the organization and with other GE businesses

Additional Information

Relocation Assistance Provided: Yes