Staff Cloud Engineer

Cloud Architecture & Infrastructure ----------------------------------- * Design, architect, and implement scalable, secure, and highly available cloud infrastructure on AWS across multi-account, multi-region environments. * Define and enforce cloud architecture standards, best practices, and governance policies using AWS Organizations, Control Tower, and SCPs. * Build and maintain Infrastructure as Code (IaC) using Terraform and AWS CloudFormation — writing reusable modules consumed across all product teams. * Improve and optimize cloud environments for cost, performance, and reliability — owning FinOps practices including Savings Plans, Spot strategy, and Graviton adoption. * Collaborate with engineering, data, and security teams to build resilient distributed systems. * Drive innovation and continuous improvement initiatives across the platform. * Design, deploy, and manage production EKS clusters at multi-tenant financial-services scale. * Plan and execute cluster upgrades, patching, and Kubernetes version lifecycle management with zero customer impact. * Build and maintain internal Helm chart libraries and GitOps-driven cluster configuration using ArgoCD or Flux. * Implement zero-trust network principles and enforce IAM least-privilege across all AWS accounts. * Drive SRE practices: define and enforce SLOs for EKS, API Gateway etc. * Lead incident response, postmortem analysis, and blameless RCA processes for platform-level outages. * Build chaos engineering exercises and disaster recovery testing across availability zones and regions. * Partner with software engineering teams to deliver end-to-end solutions from design through production. * Evaluate new AWS services and open-source tooling to continuously improve infrastructure capabilities. Required Qualifications ======================= * Strong, hands-on experience with AWS cloud services: EC2, VPC, IAM, EKS, S3, CloudWatch, API Gateway, Route 53, and more. * Proven experience operating Amazon EKS in production: cluster lifecycle, RBAC, IRSA, node groups, and autoscaling. * Proficiency in Infrastructure as Code with Terraform and AWS CloudFormation. * Solid understanding of containerization: Docker, Kubernetes architecture, and container lifecycle management. * Experience with monitoring and logging tools: Prometheus, Grafana, Dynatrace, OpenSearch, ELK/Loki. * Strong Linux/Unix systems administration and scripting in Bash, Python, or similar. * Deep knowledge of cloud security best practices: IAM, RBAC, secrets management, and network security. * Solid networking fundamentals: VPCs, subnets, load balancing, DNS, and Kubernetes ingress controllers. * Ability to troubleshoot distributed systems and debug complex production issues at scale. * Strong problem-solving skills with the ability to drive technical decisions across teams in a fast-paced environment. Preferred Skills ================ * AWS Certifications: Solutions Architect Professional or DevOps Engineer Professional. * Kubernetes Certifications: CKA or CKAD. * Experience with Helm and GitOps tools (ArgoCD, Flux). * Experience with Rancher/ArgoCD or similar tools for EKS node provisioning. * Exposure to microservices architecture and distributed systems at scale. * Experience with AWS API Gateway and Lambda Authorizers for JWT/OIDC-based auth flows. * Background in cost optimization and performance tuning (Graviton, Spot, Savings Plans). * Familiarity with CIAM/identity federation: OIDC, OAuth2, SAML, Auth0 integration. * Understanding AI/ML infrastructure: model training pipelines, deployment on EKS, and model monitoring.