REQUIRED SKILLS & COMPETENCIES

• Public cloud platforms — AWS, Microsoft Azure and Google Cloud Platform

• Cloud IAM and RBAC — roles, policies, service accounts, key rotation, MFA and SSO federation

• IaaS provisioning — compute instances, auto-scaling, load balancing and security groups

• PaaS management — managed databases, application services and serverless platforms

• Cloud networking — virtual networks, subnets, routing, VPN gateways, DNS and web application firewalls

• Cloud network virtual appliance firewalls and cloud-native security group management

• Kubernetes — EKS, AKS or GKE with Rancher; cluster management, namespaces, RBAC and network policies

• GitOps and continuous deployment — Argo CD; app-of-apps patterns, drift remediation and rollback

• CI/CD pipelines — GitHub Actions and Jenkins; build, test, lint, image pipeline and promotion workflows

• Infrastructure as code — Terraform for cloud resource provisioning across multiple providers

• AWS, Azure and GCP management — multi-cloud operations, governance and compliance

• Cloud security — posture management, CIS benchmarks, vulnerability scanning and privilege governance

• Cost governance — monitoring, alerting, right-sizing and tagging policy enforcement

• Cloud VM patching — cloud-native patch management services and image pipeline automation

• Observability integration — log forwarding, metrics ingestion and cloud-native monitoring

KEY RESPONSIBILITIES

• Provision and manage cloud accounts and environments following security and governance standards

• Design and maintain cloud IAM and RBAC across all providers — roles, policies, service accounts and key rotation

• Build and manage cloud networking — virtual networks, routing, VPN, DNS, WAF and cloud firewall rules

• Provision and scale IaaS compute instances with auto-scaling, load balancing and cost governance

• Manage PaaS services — deployment, scaling, access control and cost monitoring across all cloud providers

• Provision and maintain Kubernetes clusters; manage workloads, namespaces, RBAC and network policies

• Implement and operate Argo CD GitOps pipelines for application and infrastructure deployment

• Build and maintain CI/CD pipelines in GitHub Actions and Jenkins for build, hardening and promotion

• Manage cloud VM patching and golden image pipelines to maintain security compliance

• Monitor and respond to cloud security posture findings and privilege governance alerts

• Maintain cost governance dashboards and respond to budget threshold alerts

• Contribute to infrastructure as code repositories and participate in code review

Cloud Infrastructure Engineer