Cloud Engineer

Software Engineer: Cloud Engineering Connected Vehicle Platform (TMC)

Our mission is to empower teams to reliably run production systems using modern cloud-native tools. We focus on building scalable, automated, and resilient solutions that benefit the entire engineering organization - managing the infrastructure that connects and serves 26M+ Client vehicles globally. We are currently executing a multi-phase platform transformation: decoupling services to reduce blast radius, building a shard-based architecture to scale to 2028 demand, and laying the groundwork for GCP migration. This is not maintenance work - it is foundational platform engineering that shapes how Client connected vehicle platform operates for the next five years. Our primary customers are internal engineering teams, but the solutions we build have direct impact on vehicle reliability, operational cost, and Client ability to launch new vehicle programs on time.

Responsibilities As a Software Engineer on the Cloud Engineering team, you will be responsible for designing, developing, and maintaining the cloud platform and automation tooling that powers our platform transformation. Your contributions will directly impact the reliability, scalability, and cost-efficiency of a system serving millions of vehicles.

Skills Required

Key responsibilities include:

• Platform Development & Automation Design and build cloud-native solutions that enable automated, repeatable shard provisioning - including cluster bootstrapping, network configuration, service mesh setup, and health validation.
• Build the control plane tooling that allows a new shard to be provisioned and traffic-ready in under 24 hours with zero manual steps.
• Infrastructure as Code Own and extend production Terraform modules for multi-cloud environments (AWS and GCP). Maintain GitOps-driven infrastructure workflows using Atlantis or similar tooling. Ensure infrastructure changes are reviewed, tested, and auditable before reaching production.
• Kubernetes & Service Mesh Provision, manage, and automate Kubernetes cluster lifecycle (EKS and GKE). Write Helm charts for multi-shard deployments parameterized by shard ID, region, and environment. Configure and operate Istio service mesh including traffic management, mTLS enforcement, and observability.
• GCP Platform Engineering Build and operate GCP-native platform components: GKE workload deployment, Pub/Sub integration, Cloud Storage, Secret Manager, workload identity federation, and VPC-SC perimeter controls. Support the phased migration from AWS to GCP as the architecture evolves.
• API Gateway & Ingress Configure and operate API gateway infrastructure (Tyk, Apigee, or NGINX) including routing policies, mTLS enforcement, rate limiting, and SLI/SLO metric replication. Drive zero-downtime ingress migrations with automated runbook validation.
• CI/CD Automation Develop and maintain CI/CD pipelines using ArgoCD, Tekton, or Concourse. Automate deployment gates - cluster health checks, fleet distribution validation, rollback triggers - so that shard migrations execute reliably without human intervention at each step.
• Security & Compliance Implement IAM best practices across AWS and GCP: environment-specific role isolation, workload identity, least-privilege access, and automated access reviews. Implement and maintain monitoring for quota thresholds, certificate expiry, and security policy drift.
• Observability & Monitoring Build and maintain monitoring, alerting, and dashboarding solutions (Prometheus, Grafana, Datadog, Cloud Operations) that give engineering teams real-time visibility into shard health, fleet distribution balance, and platform SLOs.
• Automation & Tooling Write automation scripts and internal tools (Python, Go, Bash, Node.js) that improve platform workflows - migration orchestration CLIs, fleet distribution validators, runbook automation, and capacity planning tools.
• Operational Support Participate in on-call rotations, troubleshoot incidents, and apply SRE principles to improve system resilience. Drive root cause elimination, not just mitigation.

Skills Preferred

****PRIMARY SKILLS REQUIRED (Cont'd)****

Highly Desired:

• GCP experience: GKE, Pub/Sub, Cloud Storage, workload identity, VPC-SC, Cloud Operations
• API gateway experience: Tyk, Apigee, or NGINX - routing, policy management, mTLS, SLI replication
• Service mesh experience: Istio traffic management, mTLS, and observability
• gRPC service design and protobuf schema management
• Experience with CI/CD platforms: ArgoCD, Tekton, Concourse, or similar GitOps tooling
• Programming proficiency in Python, Go, Java (Spring Boot), or Node.js
• Security: IAM role isolation, mTLS, OAuth2/OIDC, securing multi-cloud environments at scale
• Experience with Atlantis, Terragrunt, or similar collaborative Terraform workflows

Experience Required

Skills & Experience Must Have:

• Experience provisioning and managing Kubernetes clusters (EKS or GKE) in production
• 3+ years managing cloud infrastructure on AWS and/or GCP
• Strong Terraform skills - writing modular, production-grade IaC with GitOps workflows
• Experience with Helm for packaging and deploying multi-environment Kubernetes workloads
• Strong debugging and problem-solving skills for cloud infrastructure and distributed systems
• Experience with monitoring and observability tools (Prometheus, Grafana, Datadog, or equivalent)

Experience Preferred

Highly Desired:

• GCP experience: GKE, Pub/Sub, Cloud Storage, workload identity, VPC-SC, Cloud Operations
• API gateway experience: Tyk, Apigee, or NGINX - routing, policy management, mTLS, SLI replication
• Service mesh experience: Istio traffic management, mTLS, and observability
• gRPC service design and protobuf schema management
• Experience with CI/CD platforms: ArgoCD, Tekton, Concourse, or similar GitOps tooling
• Programming proficiency in Python, Go, Java (Spring Boot), or Node.js
• Security: IAM role isolation, mTLS, OAuth2/OIDC, securing multi-cloud environments at scale
• Experience with Atlantis, Terragrunt, or similar collaborative Terraform workflows

Education Required

Minimum Qualifications:

• Bachelor's or Master's degree in Computer Science, Engineering, or related field
• 5+ years of professional software or cloud engineering experience
• Demonstrated experience shipping and operating production infrastructure at scale

Education Preferred

***ORDER IS BILLING TO A PD DEPARTMENT THAT REQUIRES A SECOND APRPOVAL TO EXTEND OFFER***

Hybrid (4 days per week in the office) Why This Role You will be building the platform that enables Client connected vehicle architecture to scale beyond its current limits - eliminating single-cluster blast radius risk, enabling sharded multi-cloud deployment, and making GCP migration a reality. The work is technically hard, the scale is real, and the impact is direct.