Cloud Engineer

Company description

Publicis Sapient is a digital transformation partner helping established organizations get to their future, digitally enabled state, both in the way they work and the way they serve their customers. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting, and customer experience with agile engineering and problem-solving creativity. United by our core values and our purpose of helping people thrive in the brave pursuit of next, our 20,000+ people in 53 offices around the world combine experience across technology, data sciences, consulting, and customer obsession to accelerate our clients’ businesses through designing the products and services their customers truly value.

As a Senior Associate Cloud Engineer
, you will be responsible for designing, implementing, and maintaining cloud infrastructure solutions to ensure high availability, scalability, and security. You will work closely with engineering teams to optimize cloud environments and support business-critical applications.

The Cloud Infrastructure Engineer role focuses day to day on designing and implementing scalable, highly available cloud infrastructure and platform services on GCP or AWS
.

• Experience designing and implementing scalable, highly available cloud infrastructure and platform services on GCP or AWS
  .
• Experience designing and implementing cloud foundations / landing zones (GCP foundations or AWS Landing Zones / Control Tower).
• Managing core services:
  • GCP
    :
    Compute Engine, Kubernetes (GKE), Cloud Functions, IAM
  • AWS
    : EC2, Kubernetes (EKS), Lambda, IAM
• Design and configure networking:
  • GCP
    : VPC, subnets, Cloud Load Balancers, Cloud CDN, VPNs, Interconnect
  • AWS
    : VPC, subnets, Elastic Load Balancing (ALB/NLB), Cloud Front, VPN, Direct Connect
• Manage identity and access:
  • GCP IAM roles, service accounts, org policies
  • AWS IAM roles, policies, users, SCPs
• Implement storage and data solutions for infrastructure and observability:
  • GCP
    :
    Cloud Storage, Filestore, Persistent Disks, Big Query (infra logs/monitoring)
  • AWS
    : S3, EFS, EBS, Redshift / Athena (infra logs/monitoring)

• Use advanced Terraform (preferred) with Terratest for infrastructure provisioning.
• Ability to write reusable Terraform modules.
• Automate workflows using:
  • GCP
    :
    Cloud Build
  • AWS
    :
    Code Build / Code Pipeline
  • Plus Jenkins, Git Hub Actions, or Git Lab CI.
• Develop scripts in Python, Bash, or Go for automation and cloud integrations.

• Build and maintain pipelines for deploying applications to GCP or AWS using tools such as Jenkins or Harness.
• Enable automated testing, canary releases, and blue-green deployments.
• Integrate with artifact repositories:
  • GCP
    :
    Artifact Registry, Container Registry
  • AWS
    : ECR, Code Artifact

• Deploy, monitor, and scale applications on Kubernetes:
  • GCP
    :
    Google Kubernetes Engine (GKE)
  • AWS
    :
    Amazon Elastic Kubernetes Service (EKS)
• Manage Helm charts, Kubernetes manifests, and operators.
• Apply policies and security best practices using OPA/Gatekeeper and Kubernetes-native security controls.

• Apply least-privilege access and manage secrets using:
  • GCP
    :
    Secret Manager
  • AWS
    :
    Secrets Manager / Parameter Store
  • or Hashi Corp Vault
• Secure Kubernetes workloads and compute resources using:
  • GCP
    :
    Workload Identity, Binary Authorization, Shielded VMs, VPC Service Controls
  • AWS
    : IAM Roles for Service Accounts (IRSA), Image Scanning, Nitro Enclaves, VPC Endpoints / Private Link
• Nice to have:
  Ensure compliance with CIS, PCI-DSS, HIPAA, or SOC 2, depending on industry.

• Monitor and optimize cloud spend using:
  • GCP
    :
    Budgets, Cost Explorer, Recommender APIs
  • AWS
    :
    Budgets, Cost Explorer, Trusted Advisor
• Implement rightsizing for compute, Kubernetes nodes, and storage.
• Use preemptible VMs / Spot Instances and autoscaling where applicable.

• Work with developers to containerize and deploy applications.
• Document infrastructure, processes, and incident response runbooks.
• Participate in on-call rotations and disaster recovery…