Cloud Systems Architect

Role Summary

We are seeking a seasoned Cloud Engineer to lead our team's cloud-based infrastructure projects. This individual will be responsible for designing and implementing scalable, highly available, and secure systems in production environments.

Key Responsibilities

Cross-Functional Collaboration

• Collaborate with cross-functional teams to ensure secure, reliable, and high-performing software delivery.

Cloud Infrastructure Management

• Design, implement, and maintain end-to-end CI/CD pipelines using tools like Jenkins, GitHub Actions, GitLab CI, Azure DevOps, and ArgoCD.
• Architect and manage multi-cloud infrastructure (AWS, Azure, GCP) using Infrastructure as Code (IaC) tools such as Terraform, Pulumi, and AWS CloudFormation.

DevSecOps Expertise

• Implement container orchestration with Kubernetes (EKS, AKS, GKE), including Helm charts, Operators, and service meshes (Istio, Linkerd).
• Develop and enforce DevSecOps policies including vulnerability scanning, secrets management, and compliance automation using tools like Snyk, Aqua Security, HashiCorp Vault, and Open Policy Agent (OPA).
• Integrate security controls into CI/CD workflows (e.g., code signing, SBOM generation, DAST/SAST scanning).

Monitoring and Observability

• Build and maintain monitoring and observability stacks using Prometheus, Grafana, ELK/EFK, Datadog, New Relic, and OpenTelemetry.

Infrastructure Automation

• Automate infrastructure provisioning, configuration management, and patching using Ansible, Chef, Puppet, and SaltStack.

API Gateway Management

• Manage API gateways, service discovery, and traffic routing using tools like Kong, NGINX, Envoy, and AWS API Gateway.

Disaster Recovery and High Availability

• Implement disaster recovery, backup strategies, and high availability architectures.

Cloud Resource Optimization

• Optimize cloud resources for security, performance, scalability, and cost-efficiency.

Tooling and Innovation

• Contribute to internal tooling and open-source projects that enhance DevSecOps capabilities.
• Stay current with emerging technologies in cloud-native security, platform engineering, and software supply chain integrity.

Qualifications and Experience

• Proven experience designing and supporting scalable, highly available, and secure systems in production environments.
• Deep understanding of DevSecOps principles, including shift-left security, zero trust architecture, and secure SDLC.
• Expertise in CI/CD tooling and automation across multiple platforms (mobile, web, microservices, APIs).
• Advanced knowledge of Kubernetes internals, container runtimes (Docker, containerd), and Linux namespaces/cgroups.
• Proficiency in scripting (Bash, PowerShell) and programming languages such as Python, Go, Java, Kotlin, C++, or JavaScript.
• Strong grasp of networking protocols (TCP/IP, HTTP/HTTPS, DNS, TLS, IPSec) and cloud networking (VPCs, subnets, firewalls).
• Hands-on experience with cloud-native security tools (e.g., AWS GuardDuty, Azure Security Center, GCP Security Command Center).
• Familiarity with GitOps workflows and tools like FluxCD and ArgoCD.
• Experience with artifact repositories and package managers (JFrog Artifactory, Nexus, npm, Maven).
• Knowledge of software supply chain security including SBOMs, provenance, and attestation frameworks (in-toto, Sigstore).
• Strong analytical and troubleshooting skills with a proactive approach to incident response and root cause analysis.

Educational Background

• Bachelor's or Master's Degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related technical field.
• Equivalent practical experience in DevSecOps, cloud engineering, or platform operations will also be considered.