Principal - Cloud Foundation Engineer

Tasks

• Design, implementation, and maintenance of enterprise landing zones and shared cloud services.
• Management of the account and virtual machine structure in AWS, Azure, and Google Cloud environments.
• Designing and ensuring the security of cloud infrastructure platforms.
• Development and management of reusable IaC modules (Terraform, CloudFormation, Bicep, or Pulumi).
• Automate infrastructure provisioning to ensure consistency, enable rapid deployment, reduce human error, and provide development teams with procurement capabilities.
• Implementation of Identity and Access Management (IAM) and security policies.
• Enforce and monitor compliance across all services, VPCs, and network controls.
• Conducting regular security audits and vulnerability assessments.
• Design and management of VPCs/networks, security groups, firewalls, VPNs, and load balancers.
• Implementation of automated connectivity options with performance recommendations.
• Management of monitoring, logging, and auditing tools in cloud environments.
• Set up dashboards to monitor cloud performance, security status, and costs.
• Recommendations for cost optimization and resource strategies.

Requirements

• Bachelor's degree in computer science, engineering, or a related field (or equivalent experience).
• More than 10 years of experience in cloud architecture.
• More than 5 years of experience with multiple hybrid clouds.
• More than 5 years of experience in cloud engineering infrastructure and platform operations.
• In-depth expertise in at least one major cloud provider (AWS, Azure, or GCP).
• Proficiency in Infrastructure as Code (IaC): Terraform preferred (strong understanding of the relevant language: HCL, Bicep, Python for Bicep, custom connectors).
• Experience with CI/CD pipelines (GitHub Actions, GitLab, Jenkins, AWS CodePipeline, etc.).
• Proficiency in cloud security policies and compliance frameworks.
• Proficiency in scripting languages (Python, Bash, PowerShell).
• Strong problem-solving and troubleshooting skills in on-premises and cloud environments.
• Excellent communication, leadership, and influence skills across multiple teams.
• Proven ability to establish partnerships with the professional services teams of cloud providers.
• A proven track record in process improvement automation and cost reduction in IT.

Preferred skills

• Experience in the governance of cloud platforms in regulated corporate environments.
• Familiarity with multi-cloud management frameworks (e.g., AWS, GCP).
• Knowledge of Kubernetes and container orchestration (AMIs, machine fleets).
• Background in FinOps (cloud cost optimization, forecasting, chargebacks).
• Cloud Certifications: AWS Solutions Architect, Azure Admin Architect, GCP Professional Cloud Architect.

success criteria

• Scalability, scope, and a reliable cloud foundation that is adopted across teams.
• Improved development speed through standardized services and standards.
• Significant technical innovation and the acquisition of corporate capabilities.