Cloud Engineer

We are seeking an experienced Cloud Engineer to support the implementation, automation, governance, and ongoing operations of our AWS cloud environment. This role will focus on AWS multi-account management, cloud security, infrastructure automation, identity and access management, networking, monitoring, and cost optimization.

The candidate must have strong hands‑on experience with AWS services such as AWS Control Tower, AWS Organizations, IAM, IAM Identity Center, Service Control Policies, VPC, EC2, S3, RDS, Lambda, Cloud Watch, Cloud Trail, AWS Config, and Guard Duty. The role also requires infrastructure‑as‑code experience using Terraform and AWS Cloud Formation.

The Cloud Engineer will work closely with Application, Dev Ops, SRE, Network, Security, and other support teams as required.

• Manage and support AWS cloud infrastructure across development, staging, and production environments.
• Support AWS multi‑account governance using AWS Control Tower, AWS Organizations, organizational units, account structure, and guardrails.
• Manage IAM roles, IAM policies, permission sets, permission boundaries, security groups, network access, and least‑privilege access controls.
• Administer AWS IAM Identity Center, including permission sets, account assignments, and group‑based access.
• Implement and maintain Service Control Policies to enforce cloud security, compliance, and operational standards.
• Deploy and manage AWS infrastructure using Terraform, AWS Cloud Formation, AWS CLI, and automation scripts.
• Support AWS networking components including VPCs, subnets, route tables, security groups, NACLs, internet gateways, NAT gateways, load balancers, VPN, DNS, and traffic flow configurations.
• Troubleshoot cloud infrastructure issues related to networking, compute, storage, access, permissions, deployments, and application connectivity.
• Monitor cloud resources using Cloud Watch, Cloud Trail, AWS Config, Guard Duty, and other monitoring and security tools.
• Support cloud security best practices including IAM governance, encryption, logging, secrets management, monitoring, and compliance controls.
• Manage secrets and secure access using tools such as AWS Secrets Manager, AWS Systems Manager Parameter Store, and Delinea.
• Support cost optimization initiatives including resource right‑sizing, reserved instances, savings plans, automated shutdown schedules, budget controls, and cloud usage reporting.
• Create automation scripts using Python, Bash, AWS CLI, or Lambda to reduce manual operational tasks.
• Use Git and CI/CD tools to support infrastructure change management, code reviews, branching, and deployment workflows.
• Maintain documentation for cloud architecture, operational standards, procedures, runbooks, and security controls.
• Participate in operational support, cloud governance, automation initiatives, infrastructure improvements, and production incident resolution as needed.

• Bachelor’s degree or Master’s degree in Computer Science, Information Technology, Engineering, or equivalent work experience.
• 8+ years of hands‑on experience working with AWS cloud services.
• Strong knowledge of core AWS services including EC2, VPC, IAM, S3, RDS, Lambda, Cloud Watch, Cloud Trail, AWS Config, and Guard Duty.
• Experience with AWS Control Tower, AWS Organizations, IAM Identity Center, Service Control Policies, and multi- account AWS governance.
• Experience with infrastructure‑as‑code tools such as Terraform and AWS Cloud Formation.
• Strong understanding of AWS networking concepts including VPCs, subnets, routing, DNS, load balancing, security groups, NACLs, NAT gateways, internet gateways, and traffic flow.
• Experience with Linux administration and Linux fundamentals.
• Working knowledge of CI/CD tools such as Git Hub Actions, Jenkins, AWS Code Pipeline, or similar platforms.
• Experience using Git for version control, branching, pull requests, and code reviews.
• Experience with scripting and automation using Python, Bash, AWS CLI, or Lambda.
• Ability to troubleshoot cloud infrastructure, networking, application access, and permission‑related issues.
• Strong understanding of cloud security best practices, IAM policies,…