Cloud Engineer

Job Description

Job Description

At AmaWaterways, we believe meaningful careers begin with purpose, passion and a shared commitment to delivering unforgettable experiences. For those who value curiosity, connection and personal enrichment, AmaWaterways offers the opportunity to help craft meaningful river journeys that invite travelers to follow their own current. Built on a foundation of heartfelt hospitality, we treat our guests—and each other—with genuine care, warmth and respect. AmaWaterways fosters a collaborative environment both onboard our ships and across our global network of offices, where team members grow together, support one another and take pride in upholding the high standards and thoughtful service our company is known for.

We invite talented, motivated professionals to explore our career opportunities and begin their journey with AmaWaterways today.

The Cloud Engineer is primarily responsible for the architecture, deployment, configuration, and reliable operation of cloud-based and hybrid infrastructure across AWS, Azure, and Google Cloud Platform (GCP). This role requires deep expertise in cloud services, virtualization, automation, and security, while maintaining visibility into and support of on-premises infrastructure and driving best practices as well as continuous improvement across the organization's IT environment.

DUTIES AND RESPONSIBILITIES

• Designs, deploys, and manages cloud infrastructure across AWS, Azure, and GCP, including compute, storage, networking, and managed services.
• Architects scalable, secure, and cost-efficient cloud environments aligned with business needs and IT strategy.
• Manages and maintains on-premises server infrastructure (physical and virtual), ensuring seamless integration with cloud environments in a hybrid topology.
• Leads infrastructure-as-code (IaC) initiatives using tools such as Terraform, CloudFormation, or Bicep to automate provisioning and configuration.
• Implements and manages CI/CD pipelines and DevOps workflows to support automated deployments and system updates.
• Responsible for VMware ESXi virtualization platform management, including installation, configuration, performance tuning, VM deployment templates, and automated deployments.
• Administers and maintains network services across Windows and Linux-based environments, including TCP/IP, DNS, DHCP, routing protocols, and VPN services (SSL VPN).
• Manages identity and access across cloud and on-prem platforms including Azure Active Directory, AWS IAM, and GCP IAM; maintains user and permission management.
• Designs and implements disaster recovery, failover, and backup strategies across cloud and on-premises systems to ensure business continuity.
• Monitors cloud and on-prem infrastructure for performance, availability, security, and cost; responds to and resolves incidents and alerts.
• Actively troubleshoots hardware, software, and cloud service errors by running diagnostics, documenting problems and resolutions, and assessing business impact.
• Responsible for capacity planning, storage management, and database performance optimization across cloud and on-premises platforms.
• Monitors endpoint security, virus activity, and security agent deployments; implements security best practices and compliance controls across all environments.
• Provides technical documentation and specifications to IT staff for planning and implementing new infrastructure or upgrades.
• Assists in the development and maintenance of group policies, login scripts, and desktop environment management tools.
• Administers virtual server inventory including provisioning, archiving, and decommissioning across both cloud and on-prem environments.
• Provides third-level support and escalation assistance for the service desk; mentors junior IT colleagues on troubleshooting and cloud technologies.
• Maintains and monitors all servers and workstations, including hardware configurations, error log review, backup scheduling, and general system health checks.
• Researches emerging cloud technologies and recommends improvements to keep pace with evolving IT business needs.
• Assists with all other IT projects and initiatives as directed; performs other related duties as assigned by management.

SUPERVISORY RESPONSIBILITIES

This position has no direct supervisory responsibilities. However, the Senior Cloud Engineer is expected to provide technical mentorship and guidance to junior and mid-level IT staff.

QUALIFICATIONS

Education:

• Bachelor's Degree (BA/BS) in Computer Science, Information Technology, Cloud Computing, Systems Administration, or a closely related field; OR five or more years of equivalent experience in cloud infrastructure, network administration, or systems engineering.

Experience:

• Minimum 5 years of hands-on experience in IT infrastructure, with at least 3 years of dedicated experience in cloud platforms (AWS, Azure, and/or GCP).
• Proven experience with hybrid cloud environments integrating on-premises infrastructure with public cloud services.
• Strong experience with virtualization platforms, specifically VMware ESXi and vSphere.
• Demonstrated experience with infrastructure-as-code tools (Terraform, CloudFormation, Bicep, or equivalent).
• Experience with scripting languages such as PowerShell, Bash, or Python for automation.

Certifications (preferred):

• AWS Certified Solutions Architect, AWS SysOps Administrator, or equivalent AWS certification.
• Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure Solutions Architect Expert (AZ-305).
• Google Associate Cloud Engineer or Professional Cloud Architect.
• VMware Certified Professional (VCP) or equivalent virtualization certification.
• CompTIA Network+, Security+, or similar IT certifications are a plus.

Technical Skills:

• Deep knowledge of AWS, Azure, and GCP services including compute (EC2, Azure VMs, GCE), storage (S3, Blob, GCS), networking (VPC, VNet, VPC), and managed databases.
• Strong knowledge of Windows Server and Linux (RHEL/CentOS/Ubuntu) administration.
• Proficiency with containerization and orchestration tools such as Docker and Kubernetes (EKS, AKS, GKE).
• Solid understanding of networking fundamentals: TCP/IP, DNS, DHCP, BGP, VPN, firewall, and load balancing.
• Familiarity with SIEM tools, endpoint protection platforms, and cloud-native security services.
• Working knowledge of Active Directory, Azure AD, and identity federation (SSO, SAML, OAuth).
• Proficiency with Microsoft Office Suite and ITSM/ticketing platforms.

COMPETENCIES

• Analytical Thinking — Synthesizes complex technical and business data; identifies risks and develops effective solutions.
• Cloud & Technical Expertise — Continuously builds and shares knowledge across cloud and on-prem domains; pursues training and certifications.
• Problem Solving — Identifies and resolves infrastructure issues in a timely manner; applies sound judgment under pressure.
• Communication — Communicates clearly and effectively with both technical and non-technical stakeholders; produces high-quality documentation.
• Adaptability — Manages competing priorities; adjusts approach to fit evolving business and technology needs.
• Initiative & Innovation — Proactively identifies opportunities for improvement; brings creative and resourceful solutions to complex challenges.
• Customer Service Orientation — Responds promptly to internal customer needs; committed to minimizing disruption and delivering reliable service.
• Teamwork & Mentorship — Contributes positively to team dynamics; actively supports the growth of IT colleagues.
• Ethics & Professionalism — Works with integrity; maintains confidentiality of sensitive systems and data.
• Strategic Thinking — Understands the organization's technology landscape and aligns infrastructure decisions with long-term goals.
• Change Management — Develops and communicates workable implementation plans; guides teams through technology transitions.
• Security Mindset — Applies a security-first approach to all infrastructure decisions; observes and enforces organizational security policies.

PHYSICAL DEMANDS & WORK ENVIRONMENT

• Frequently required to sit, stand, and walk throughout the workday.
• Continually required to utilize hand and finger dexterity for keyboard and equipment use.
• Occasionally required to climb, balance, bend, stoop, kneel, or crawl when accessing data center or server room equipment.
• Occasionally exposed to extreme heat or cold (non-weather) in data center environments.
• Must occasionally lift and/or move up to 45 lbs; frequently up to 20 lbs; continually up to 15 lbs.
• Moderate noise level typical of an office and data center environment.
• Specific vision requirements include close vision and color vision.
• Some after-hours or on-call availability may be required to support critical infrastructure incidents or maintenance windows.