Cloud Engineer Lead

Job Description

About the role

\n

We are looking for a hands-on AWS DevOps Lead to own and evolve our cloud platform and lead a blended onsite and offshore team of 5–10 engineers. You will set the vision and roadmap for AWS infrastructure, DevOps, and CI/CD, while staying technical enough to design, build, and troubleshoot the platform yourself.

\n

As part of the Platforms & Engineering team, you will partner with IT stakeholders to cloud-enable their systems, keep our AWS environment secure and well governed, and make sure the team delivers reliably. This role suits a leader who is equally comfortable whiteboarding a multi-account network design, reviewing a pipeline, and running a team stand-up.

\n

Key responsibilities

\n

Leadership and vision

\n

\n
• Define the vision, roadmap, and standards for AWS infrastructure, DevOps, and CI/CD across the Platforms & Engineering team.
\n
• Lead, mentor and grow a team of 5–10 FTEs and contractors across onsite and offshore locations.
\n
• Plan and assign work, set priorities, track delivery and remove blockers so commitments are met on time.
\n
• Build a culture of automation, ownership, documentation and continuous improvement.
\n
• Manage contractor and vendor resources, including onboarding, quality of delivery and knowledge transfer.
\n

\n

AWS infrastructure and architecture

\n

\n
• Design, build and maintain secure, scalable and cost-effective AWS environments using services such as EC2, ECS/EKS, Lambda, S3, RDS, IAM, CloudWatch and CloudFormation.
\n
• Own the AWS network architecture: VPC design, subnets, routing, Transit Gateway, VPC peering, PrivateLink, Direct Connect / site-to-site VPN, DNS (Route 53), load balancing, and hybrid connectivity.
\n
• Drive Infrastructure as Code (Terraform/Terragrunt and/or CloudFormation/CDK) as the standard for all provisioning.
\n
• Hands-on experience authoring Terraform modules from scratch, not just consuming existing ones.
\n
• Lead multi-account strategy and governance using AWS Organizations, Control Tower, and landing zone patterns.
\n
• Ensure high availability, disaster recovery, backup, and resilience of cloud workloads.
\n
• Monitor and optimize cloud spend through tagging, rightsizing and FinOps practices.
\n

\n

DevOps, GitHub and CI/CD

\n

\n
• Own GitHub administration: organizations, repositories, branching strategy, access controls and GitHub Actions.
\n
• Design and maintain CI/CD pipelines that deliver fast, repeatable and secure releases.
\n
• Standardize build, test, deployment, and release practices across teams.
\n
• Implement observability: monitoring, logging, alerting, and incident response runbooks.
\n

\n

Cloud security

\n

\n
• Embed security in every layer of the AWS platform, working with the Cybersecurity team.
\n
• Implement and manage IAM least-privilege, SCPs, KMS encryption, Secrets Manager, Security Groups, and NACLs.
\n
• Use AWS security services such as GuardDuty, Security Hub, AWS Config, CloudTrail, Inspector, and WAF.
\n
• Integrate DevSecOps practices into pipelines, including code, dependency, container and IaC scanning.
\n
• Support audits, compliance requirements and remediation of security findings.
\n

\n

Stakeholder partnership

\n

\n
• Work closely with IT stakeholders and application owners to migrate, cloud-enable, and support their systems on AWS.
\n
• Translate business and application needs into infrastructure designs, estimates, and delivery plans.
\n
• Communicate status, risks, and roadmap clearly to senior leadership and partner teams.
\n

\n

Required qualifications

\n

\n
• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience.
\n
• 10+ years in infrastructure, cloud, or DevOps engineering, with 5+ years of hands-on AWS experience.
\n
• 3+ years leading technical teams, including managing contractors and onsite/offshore delivery.
\n
• Deep expertise in AWS networking: VPC design, Transit Gateway, hybrid connectivity, DNS, and routing.
\n
• Strong hands-on experience with core AWS compute, storage, database, and serverless services.
\n
• Proven experience with Infrastructure as Code (Terraform/Terragrunt, CloudFormation, or CDK).
\n
• Strong background in GitHub administration, GitHub Actions, and CI/CD pipeline design.
\n
• Solid knowledge of AWS security services, IAM, and cloud security best practices.
\n
• Scripting skills in Python, Bash, or PowerShell.
\n
• Experience with containers and orchestration (Docker, ECS and/or EKS).
\n
• Excellent communication skills and the ability to influence technical and non-technical stakeholders.
\n
• Exposure to FinOps practices and cloud cost management tools.
\n

\n

Preferred qualifications

\n

\n
• Experience with Amazon Bedrock and integrating generative AI services into enterprise platforms and applications.
\n
• Familiarity with AI/ML infrastructure on AWS, such as SageMaker, vector stores, and secure model access patterns.
\n
• AWS certifications such as Solutions Architect – Professional, DevOps Engineer – Professional, Advanced Networking – Specialty, or Security – Specialty.
\n
• Experience in regulated industries such as financial services or insurance.
\n
• Knowledge of security and compliance frameworks such as NIST, CIS Benchmarks, SOC 2 or ISO 27001.
\n

\n