IT Cloud Engineer

Position Overview:

• Cloud Engineer with deep experience in both AWS and Azure to design, build, and operate secure, scalable, cost-efficient cloud platforms.
• Work core infrastructure, guide architecture, and level-up engineering practices across networking, identity, observability, and security.
• The Cloud Engineer is responsible for creating a secure path to production across AWS and Azure centered on Kubernetes, identity-first access, and DevSecOps.
• Design and operate resilient EKS platforms of multi-cluster, GitOps, admission control, network policies, and end-to-end identity patterns.

Responsibilities:

• Design and Build: Multi-account/subscription landing zones, VPC/VNet topologies, private connectivity (Transit Gateway, PrivateLink/Private Endpoint, VPN/Direct Connect/ExpressRoute), and secure baseline controls.
• Platform Ops: Run production environments (patching, backups, DR, autoscaling, capacity planning, OS/hypervisor images, AMIs/VM images).
• Identity & Security: Implement least-privilege IAM/Entra ID, SSO, Conditional Access, secrets management (AWS KMS, Azure Key Vault), and policy guardrails (SCPs, Azure Policy).
• Networking: Build resilient L3/L7 routing, load balancing (ALB/NLB, Azure LB/App GW), DNS, TLS, and service-to-service connectivity (PrivateLink, VNet peering, TGW).
• Observability: Standardize logging/metrics/tracing (CloudWatch, Azure Monitor/Log Analytics), create SLOs/dashboards, and incident response runbooks.
• Author high-fidelity analytics (KQL) mapped to MITRE Telecommunication & CK, tune noisy rules, implement UEBA, and wire SOAR/playbooks for auto-containment (isolate instance, block token, rotate keys, disable user).
• Normalize/ingest logs from cloud control planes, EDR, firewalls, API gateways, containers, and serverless into SIEM.
• Shift-left controls in CI/CD (GitHub Actions and Azure DevOps).
• Lead Kubernetes cluster lifecycle management (provisioning, upgrades, scaling, monitoring, troubleshooting).
• Lead efforts around observability, policy enforcement, cost optimization, and RBAC/security hardening within the Kubernetes cluster.
• Support CI/CD pipelines and GitOps-based deployments.
• Ability to troubleshoot issues related to networking, storage, interdependencies, security, etc.
• Building highly available, cost efficient, fault tolerant, and scalable distributed systems.
• Ensure the stability, integrity and efficient operation of the infrastructure.
• Manage Linux based tools, position requires experience with Linux and scripting.
• Writing and enforcement of security policies in a cloud environment.
• Assist in reviewing logs, writing alerts, and tag management.
• Configure and maintain permission sets and access privileges to all cloud resources.
• Continuously manage the configuration of all AWS Org environments and AWS services.
• Accountability: Incumbent is responsible for protecting the assets of Client and for maintaining and providing a constructive and professional work environment.

Qualifications:

• Bachelor's degree or equivalent in IT, computer science or related field; and a minimum of years or more of relevant work experience; or Equivalent combination of education and progressive, relevant and direct experience may be considered in lieu of minimum educational/experience requirements indicated above.
• 6+ years working in an enterprise level environment designing, building server, storage & network solutions in virtualized environments.
• 3+ years of experience implementing private/public and/or hybrid cloud solutions.
• 3+ year experience in container technology like Docker, Kubernetes or EKS.

If hired, you will enjoy the following ECLARO Benefits:

• k Retirement Savings Plan administered by Merrill Lynch
• Commuter Check Pretax Commuter Benefits
• Eligibility to purchase Medical, Dental & Vision Insurance through ECLARO

Apply Now

Success!

Your application was successfully sent!