Cloud Engineer

Cloud Engineer

The Cloud Engineer designs, implements, and maintains secure, scalable, and reliable cloud-based solutions. This role supports business objectives by optimizing cloud infrastructure, automating deployments, and ensuring cloud environments meet security, compliance, and performance standards.

Key Responsibilities

Cloud Architecture & Infrastructure:

• Design and deploy AWS cloud architectures that meet performance, security, availability, and cost-efficiency requirements for enterprise and research applications.
• Build and maintain core cloud components, including networking, compute, storage, and identity, with security-by-design (least privilege, segmentation, encryption, defense-in-depth).
• Evaluate and recommend cloud services and architectural patterns; develop evidence-based adoption proposals that balance capability, operational cost, and long-term sustainability.

Automation & Deployment:

• Implement and maintain infrastructure-as-code (IaC) using Terraform, CloudFormation, Ansible, or equivalent to make provisioning repeatable and auditable.
• Build and maintain CI/CD pipelines for infrastructure and application deployments with testing, validation, safe releases, and rollback strategies.
• Automate operational tasks such as patching, scaling, monitoring, alerting, and cost optimization to reduce manual effort and improve reliability.

Security & Compliance:

• Ensure cloud environments align to security standards and regulatory/data governance requirements, including controls for IAM, secrets management, audit logging, and encryption in transit/at rest.
• Monitor cloud security posture; identify and remediate misconfigurations, drift, and policy violations (including integration of CSPM tools where applicable).
• Partner with cybersecurity teams to align cloud platform security to enterprise threat models and relevant regulated requirements (e.g., GxP, 21 CFR Part 11, HIPAA, SOX as applicable).

Operational Excellence & Optimization:

• Monitor performance, availability, and cost; right-size resources and drive FinOps practices to reduce waste and improve ROI.
• Contribute to platform engineering standards, reference architectures, and guardrails that enable development teams to consume cloud services consistently.
• Troubleshoot infrastructure issues and participate in post-incident reviews; implement preventive improvements to reduce recurrence.

Basic Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent professional experience).
• 3+ years of hands-on cloud engineering experience in a production AWS enterprise environment.
• Experience with infrastructure-as-code tools (Terraform, CloudFormation, Ansible, or equivalent) and version control (Git).
• Scripting experience for automation (Python, Bash, or equivalent).
• Strong understanding of cloud networking, virtualization, containerization (Docker/Kubernetes), and cloud security fundamentals.
• Experience with CI/CD pipelines and DevOps practices in a cloud-native environment.

Preferred Qualifications

• AWS certifications (Solutions Architect Associate/Professional, DevOps Engineer) and/or Azure Administrator/Architect.
• Experience with enterprise FinOps and cost optimization.
• Familiarity with monitoring/observability tools (Prometheus, Grafana, Splunk, CloudWatch, Azure Monitor, or similar).
• Regulated-industry experience (pharma/healthcare/life sciences), including compliance considerations (GxP, 21 CFR Part 11, HIPAA).
• Production Kubernetes experience (EKS/AKS/self-managed), including cluster operations and workload management.
• Cloud security architecture background (IAM design, secrets management, network security groups, cloud-native security tooling).
• Experience delivering in an Agile methodology.

What You'll Bring

• Strong hands-on ownership of production cloud infrastructure (reliability, security, and cost).
• IaC-first mindset with an emphasis on consistency and auditability.
• Security-conscious engineering approach (least privilege and defense-in-depth by default).
• Clear communication skills with both engineers and non-technical stakeholders.