Cloud Engineer • Senior

Who you are

You have over 5 years of experience in cloud architecture, preferably with a focus on AWS, where you've built foundational cloud infrastructures that support business needs. Your expertise includes designing landing zones and account structures, ensuring that security and compliance are at the forefront of your work. You possess a strong understanding of networking, including VPCs, subnets, and routing, and you are adept at configuring IAM roles and policies to maintain a secure environment.

You have a security-first mindset, demonstrating operational discipline and a pragmatic approach to incident management. Your communication skills allow you to effectively collaborate with both technical and non-technical teams, ensuring that everyone is aligned on project goals and security protocols. You are also experienced in implementing observability solutions using tools like CloudTrail and CloudWatch, which help in monitoring and auditing cloud environments.

Desirable

Experience with automation tools such as Terraform is a plus, as you will be defining and automating Infrastructure as Code (IaC) to streamline deployments and ensure consistency across environments. Familiarity with AWS Secrets Manager and Parameter Store for secret management and end-to-end encryption will also be beneficial in this role.

What you'll do

In this role, you will design and implement the landing zone and account structure for AWS, ensuring that all components are secure and compliant with industry standards. You will define and deploy networking solutions, including VPCs and hybrid connectivity, to support various applications and services. Your responsibilities will also include configuring IAM roles and policies with a minimum privilege approach, establishing security baselines, and implementing continuous monitoring practices.

You will work on automating Infrastructure as Code (IaC) using Terraform, creating reusable modules and validation pipelines to enhance deployment efficiency. Additionally, you will govern tagging, budgets, and chargeback/showback processes from the outset, ensuring that resources are managed effectively.

Your role will involve defining secret management policies and ensuring end-to-end encryption across all services. You will also be responsible for ensuring resilience through multi-AZ deployments, backups, and disaster recovery patterns, responding to incidents in an orchestrated manner. Documentation of architecture and decisions will be crucial, as you will operate under a security-first and cost-benefit approach.

What we offer

At NEORIS, we provide a supportive work environment that encourages innovation and continuous learning. You will have access to private medical insurance and opportunities for professional development through courses and training. We invite you to learn more about our culture and values by visiting our website or following us on social media.