Cloud Engineer

Kforce has a client in Foster City, CA that is seeking a Cloud Engineer.
Summary:
Were looking for a Cloud Engineer to help operate and support our AWS environment, working closely with the Cloud Engineering team and partnering with engineering teams across IT & Applications, Infrastructure, Product Software, Data Platform, and Manufacturing Operations. This role executes day-to-day provisioning, automation, and support work that keeps our clients AWS platform running securely and reliably.
Responsibilities:

• Provision and manage AWS accounts and tenant structures, including IAM users/roles, cross-account access, and SSO group setup, following established playbooks
• Write and maintain Terraform modules - both applying existing centralized modules and authoring new ones - for account setup, networking, IAM, and resource provisioning
• Build and configure AWS networking resources (VPCs, subnets, VPC peering, routing) based on team designs
• Support secrets management workflows (AWS Secrets Manager, Vault) for integrations with third-party platforms (e.g., Mulesoft)
• Apply security and governance guardrails to provisioned resources (least-privilege IAM, encryption, AMI/container compliance checks)
• Troubleshoot and resolve day-to-day AWS support tickets across compute, storage, and networking for cross-functional customers (engineering tools, HPC/simulation workloads, mission control systems, data platform, manufacturing systems)
• Follow and help maintain runbooks/playbooks for recurring provisioning and operational tasks
• Escalate architectural or ambiguous issues to senior team members while owning execution of well-defined requests

Requirements:

• 5+ years of experience
• Hands-on experience with AWS in a production environment - compute, storage, networking, and IAM
• Experience with Infrastructure as Code, ideally Terraform, including writing and modifying modules
• Working knowledge of AWS networking fundamentals (VPCs, subnets, routing, security groups)
• Understanding of IAM and cloud security fundamentals (least privilege, encryption, secrets management)
• Comfortable working from tickets, playbooks, and runbooks, and following documented processes accurately
• Good written and verbal communication skills; able to work with engineers and business stakeholders to clarify requirements
• Ability to work independently on well-scoped tasks while knowing when to escalate

Bonus Qualifications:

• Experience with Terraform Cloud, Spacelift, or similar centralized IaC platforms
• Exposure to multi-account AWS environments (Landing Zones, Control Tower)
• Experience with containerized workloads (Kubernetes/EKS)
• Familiarity with monitoring/alerting tools (e.g., Grafana, CloudWatch)
• Exposure to AI/ML or HPC cloud workloads

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforces sole discretion unless
and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking "Apply Today" you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.

PDN-a2dc9d2e-e924-4426-82e5-cb92c2cb7bb4