Principal - Cloud Engineer

Ally and Your Career Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We love this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion.

From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?

Work Schedule:

Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role’s specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

• Lead architecture discovery sessions with application, infrastructure, security, and business stakeholders to define recovery objectives, dependency maps, and multi‑region requirements
• Design multi‑region AWS architectures — Active/Active, Warm Standby, Pilot Light, and Backup and Restore — aligned to application criticality, RTO/RPO targets, and compliance requirements
• Design and implement AWS Application Recovery Controller (ARC) patterns — readiness checks, routing controls, safety rules, and zonal shift — to enable deliberate, auditable traffic management and verify recovery environments are prepared before any failover event
• Evaluate AWS Resilience Hub to identify resilience gaps, map recovery policies, and drive remediation to measurable objectives
• Define traffic management and failover strategies using Amazon Route 53, Cloud Front, load balancers, API Gateway, and health checks
• Design backup and recovery patterns using AWS Backup, S3, RDS/Aurora cross‑region capabilities, encryption, and restore validation procedures
• Produce architecture decision records documenting service selection, alternatives considered, constraints, and expected outcomes
• Define secure AWS landing‑zone controls and design IAM roles, permission boundaries, federation, and least‑privilege access models for applications, automation, and platform services
• Establish infrastructure and application‑performance monitoring using Amazon Cloud Watch, Dynatrace, and distributed tracing; build log forwarding to enterprise analytics platforms including Splunk; design operational dashboards connecting infrastructure health, security findings, and recovery readiness indicators
• Develop Fin Ops operating models covering account ownership, tagging, chargeback, budgets, and anomaly detection; forecast cloud consumption and build cost‑optimization business cases covering rightsizing, Savings Plans, and Reserved Instances
• Evaluate migration strategy patterns and design migration approaches using EC2, VPC, S3, RDS, Cloud Formation, containers, and serverless services aligned to business criticality and RTO/RPO targets
• Use AWS Migration Hub, Application Migration Service, and Database Migration Service to coordinate and execute migrations; define data migration, validation, reconciliation, rollback, and synchronization procedures aligned to RTO/RPO requirements with tested cutover plans
• Validate migrated workloads through functional, performance, backup, restore, and disaster‑recovery…