Cloud Engineer

Required Qualifications

AWS networking: VPC, Subnets, Security Groups, NACLs, Route Tables, TGW.

IAM: Policies, roles, permissions boundaries; IRSA for Kubernetes.

EKS experience: Provisioning, node groups, autoscaling, RBAC, cluster add-ons, ingress, and observability.

Python development and deployment: Packaging, virtual environments, containerization (Docker), dependency management (pip/Poetry), and runtime optimization.

Kubernetes tooling: kubectl, Helm ; authoring manifests for Deployments, Services, ConfigMaps, Secrets.

CI/CD pipelines: Build/test/deploy for containerized Python services; artifact management, promotions, and automated rollbacks.

Logging and monitoring: CloudWatch, Prometheus/Grafana, OpenTelemetry, log aggregation, alerting.

Linux administration: System configuration, patching, performance, security hardening.

Strong understanding of security best practices, encryption, secrets management, and image scanning.

Database expertise in AWS RDS (PostgreSQL/MySQL/SQL Server), schema migration, performance tuning, backup/restore, and replication/HA.

Preferred Qualifications

Experience with service meshes (e.g., AWS App Mesh, Istio) and ALB/NLB ingress controllers.

Knowledge of cost optimization for EKS and RDS (rightsizing, autoscaling, compute/spot strategies).

Experience with Infrastructure as Code (CloudFormation or Terraform) for EKS, VPC, IAM, and RDS.

Familiarity with GitOps workflows (Argo CD/Flux) and progressive delivery (canary/blue-green).

Experience migrating monoliths to microservices and refactoring Python apps for Kubernetes.

Exposure to security frameworks and compliance in regulated environments.