Sr. Cloud Engineer

Sr. Cloud Engineer – Remote

Although this is a Senior Cloud Engineer role, the expectation is for the consultant to be highly hands-on and actively involved in day-to-day activities, not just architecture or oversight.

Required Skills and Qualifications

Proven, hands-on experience architecting and operating enterprise cloud infrastructure across both Microsoft Azure and Amazon Web Services (AWS), including direct responsibility for provisioning and securing core infrastructure — not just consuming managed AI services on top of it.

Expertise

• Infrastructure as Code (hands-on): Terraform, AWS CloudFormation, and/or AWS CDK for AWS provisioning; Azure Resource Manager (ARM) templates and/or Bicep for Azure provisioning; Python (Boto3 for AWS, Azure SDK for Python for Azure) for automation, scripting, and operational tooling against cloud APIs — candidate should be able to write and maintain IaC and scripts directly, not just review them.

• Networking & isolation: VPC design (subnets, route tables, peering/transit gateway, NAT), Azure Virtual Network equivalents, and secure network segmentation for multi-tier applications

• Identity & access: IAM policy design (roles, least-privilege, resource policies), Amazon Cognito (user pools, identity pools, federated auth) and Azure AD/Entra ID equivalents, service-to-service authentication and authorization patterns

• Container orchestration: Kubernetes hands-on experience (EKS and AKS), including cluster setup, networking (CNI, ingress), scaling, and workload security

• API & edge layer: API Gateway (REST/HTTP APIs, authorizers, throttling), AWS Lambda, CloudFront (CDN configuration, caching strategies, origin security, WAF integration)

• Security : Security group and policy design, encryption at rest/in transit, secrets management, compliance controls (SOC2/HIPAA/etc. as applicable), and audit/logging setup

• Hybrid/on-prem integration: VPN Gateway setup (AWS Site-to-Site VPN, AWS VPN Gateway/Client VPN, Azure VPN Gateway) for dedicated connectivity, secure and reliable data flow between on-premises systems and Azure/AWS, hybrid identity federation a plus.

• Azure services such as App Services, API Management, Azure OpenAI, AI Search, Cognitive Services, and Azure SQL Database

• AWS services such as Bedrock, Lambda, API Gateway, ECS/EKS, S3, Textract, Comprehend, and supporting data services for AI workloads

• CI/CD and DevOps practices for multi-cloud delivery using Azure DevOps, GitHub Actions, or AWS-native tooling

• GenAI architecture: solid understanding of GenAI solution architecture and hands-on experience standing up the underlying infrastructure — LLM hosting/integration patterns, API/orchestration layers, scaling, monitoring, and cost/security controls

• Agentic & multi-agent architecture: ability to architect infrastructure supporting single- and multi-agent solutions — orchestration/coordination layers, agent-to-agent communication, state and memory management, tool/API integration points, scaling, and observability for agentic workflows.

• Highly desirable: understanding of data pipelines, retrieval-augmented generation (RAG) concepts (standard and agentic RAG patterns), and vector databases, including how they're provisioned and integrated within GenAI and multi-agent architectures

• Ability to evaluate and recommend the right services for a given workload based on cost, scalability, latency, and operational tradeoffs.

• Understanding of data governance, security, compliance, and model risk requirements for regulated or mission-critical workloads

• Oversee that all solutions are resilient, cost-efficient, observable, and compliant with organizational and industry standards for data privacy, security, model governance, and responsible AI.

• Strong communication and teamwork skills in agile, cross-functional environments

Preference
Java experience preferred.