Cloud Engineer

Cloud Engineer

BNY is seeking senior Public Cloud Engineers to design, automate, provision, secure, and support enterprise cloud platforms across Azure and Google Cloud. The team maintains the automated foundation that produces secure, compliant, preconfigured cloud environments and enables product teams to consume cloud services through repeatable self-service patterns. Engineers must be hands-on, self-directed, and able to contribute quickly in a regulated, large-scale environment.

Key Responsibilities

• Design and provision secure development and production cloud environments using Terraform and reusable infrastructure-as-code modules.
• Build and support Azure and GCP landing zones, cloud networking stacks, identity integrations, guardrails, and shared platform services.
• Manage Terraform workspaces, state, plans, and deployment pipelines while reviewing proposed changes for accuracy and operational risk.
• Develop and maintain GitLab CI/CD and YAML-based automation for infrastructure provisioning and platform operations.
• Configure and troubleshoot networking, DNS, private connectivity, routing, cloud access, and platform dependencies.
• Implement cloud security and governance controls, including RBAC, managed identities, service principals, secrets management, service-mesh security, and compliance requirements.
• Support Kubernetes-based platforms, including AKS, Helm deployments, and related container infrastructure where required.
• Monitor platform health and troubleshoot complex infrastructure issues using cloud-native monitoring, logs, diagnostics, and enterprise observability tools.
• Conduct impact analysis, validation, post-change checks, root-cause analysis, and operational handoffs.
• Create architecture diagrams, environment specifications, implementation requirements, and support documentation in Confluence; maintain delivery visibility through Jira.
• Collaborate with Public Cloud Operations, Core Engineering, application teams, security partners, and other infrastructure stakeholders.
• Identify opportunities to improve reliability, standardization, self-service enablement, and cloud cost efficiency.

Required Qualifications

• Senior-level hands-on engineering experience with Azure or GCP in an enterprise environment; strong Azure expertise is highly relevant to the current platform.
• Advanced Terraform and infrastructure-as-code experience, including module development, workspace or state management, and controlled deployment practices.
• Strong understanding of cloud architecture, networking, identity, security, observability, and operational reliability.
• Experience with GitLab or comparable source-control and CI/CD platforms, plus YAML pipelines and automation practices.
• Proficiency in Bash, PowerShell, Python, or a similar scripting language.
• Demonstrated ability to troubleshoot complex infrastructure and networking issues and coordinate resolution across teams.
• Ability to produce clear technical documentation, requirements, architecture diagrams, and implementation plans.
• Self-directed working style and ability to deliver with minimal onboarding.