Cloud Platform Engineer KLA · Milpitas · Platform & Infrastructure –ago

To make electronics, you need chips, wafers, transistors, reticles, and... To make these, you must see, test and manufacture them at scale—faster and better than ever before. That's where KLA comes in. Whether you're early in your career or an experienced professional, you'll solve complex challenges, work alongside brilliant minds and help shape the future of technology.

KLA's IT group supports business growth and productivity by connecting people, process and technology around the world. We work to improve the technology that drives our business to thrive and focus on empowering employee use of technology. This integrated approach to customer service, creativity and technological excellence enhances employee productivity, business analytics and process excellence.

In this role, you will play a key part in advancing business priorities by delivering high-impact work across your area of expertise.

The Cloud Platform Engineer will build, automate, secure, and operate cloud-based platform solutions across multiple cloud platforms —
GCP, Azure, and AWS, with GCP and Azure as the preferred focus
. This role requires a strong, practical understanding of cloud security, identity and access management, networking, and secure-by-design principles, in addition to IaaS and PaaS best practices.

• Build scalable, resilient, and secure cloud platforms on IaaS/PaaS across GCP, Azure, and AWS (focus on GCP and Azure).

• Execute cloud migrations — re-host, re-platform, refactor, and re-architect — with automation and security posture improvement.

• Drive application and infrastructure modernization for scalability, performance, and efficiency.

• Partner with engineering and security teams to implement reference architectures, reusable modules, and security guardrails.

• Optimize infrastructure for performance, reliability, security hardening, and cost efficiency.

• Implement and maintain cloud security controls and governance guardrails aligned with industry standards.

• Build secure cloud networking, including VPN, Cloud Interconnect, Express Route, and Direct Connect.

• Configure network segmentation, micro-segmentation, and zero-trust controls.

• Secure and operate containers, Kubernetes (GKE/AKS/EKS), serverless, and microservices

• Develop Infrastructure as Code with Terraform (primary), plus Azure Bicep/ARM, Google Config Connector, and AWS Cloud Formation.

• Build Dev Sec Ops  CI/CD pipelines with integrated security scanning, policy enforcement, and compliance validation.

• Implement observability — logging, monitoring, alerting, and incident response integration.

• Evaluate emerging cloud and automation technologies to improve reliability, security, and resilience.

• Create platform documentation, runbooks, and architecture/security diagrams.

• Support cloud operating models:
  Fin Ops, tagging standards, and resource governance

• Bachelor's degree in Computer Science, Computer Engineering, or related field of study.
• Eight (8) yearsof hands-on cloud platform engineering or infrastructure experience, including ownership and operation of secure production environments.
• Proficient in at least one major cloud platform —GCP or Azure preferred, with AWS in scope — and strong cross-cloud fundamentals.
• Solid, practical understanding of cloud networking, cloud security, containers, Kubernetes, serverless technologies, and microservices.
• Hands-on experience with cloud security controls, including IAM, encryption, key management, network security, and zero-trust principles.
• Working knowledge of cloud governance, monitoring, observability, Fin Ops, and cost management.
• Demonstrated experience embedding security into IaC and CI/CD pipelines (Dev Sec Ops ).
• Strong communication and collaboration…