Cloud Engineer

We are looking for a skilled Cloud Engineer to join our Platform Engineering team and help build, maintain, and scale the secure, reliable, and high-performance cloud infrastructure that powers Clearwater core SaaS platform. You will work hands-on across our multi-account AWS environment, contribute to Amazon EKS platform operations, and collaborate with product teams to deliver robust cloud solutions.

Cloud Infrastructure & Operations:

• Build, deploy, and maintain scalable, secure, and highly available cloud infrastructure on AWS across multi-account environments.

• Implement and maintain Infrastructure as Code (IaC) using Terraform and AWS CloudFormation, contributing to reusable modules used across product teams.

• Optimize cloud environments for cost, performance, and reliability, supporting FinOps practices including Savings Plans, Spot strategy, and Graviton adoption.

• Collaborate with engineering, data, and security teams to support resilient distributed systems.

• Participate in continuous improvement initiatives across the platform.

• Own incident response: on-call rotation, triage, mitigation, and blameless post-mortems.

• Provide Cloud and Infrastructure support across platform teams.

Kubernetes & EKS:

• Deploy, operate, and maintain Amazon EKS clusters in a multi-tenant production environment.

• Support cluster upgrades, patching, and Kubernetes version lifecycle activities.

• Contribute to internal Helm chart libraries and GitOps-driven cluster configuration using ArgoCD or Flux.

Security & Reliability:

• Implement zero-trust network principles and enforce IAM least-privilege across AWS accounts.

• Support SRE practices: contribute to SLO definitions and monitoring for EKS, API Gateway, and related services.

• Participate in incident response, postmortem analysis, and blameless RCA processes for platform-level issues.

• Support chaos engineering exercises and disaster recovery testing across availability zones and regions.

Collaboration & Growth:

• Partner with software engineering teams to deliver end-to-end solutions from design through production.

• Evaluate new AWS services and open-source tooling to improve infrastructure capabilities.

• Hands-on experience with AWS cloud services: EC2, VPC, IAM, EKS, S3, CloudWatch, API Gateway, Route 53, and more.

• Experience operating Amazon EKS in production: cluster lifecycle, RBAC, IRSA, node groups, and autoscaling.

• Proficiency in Infrastructure as Code with Terraform and AWS CloudFormation.

• Solid understanding of containerization: Docker, Kubernetes architecture, and container lifecycle management.

• Experience with monitoring and logging tools: Prometheus, Grafana, Dynatrace, OpenSearch, ELK/Loki.

• Strong Linux/Unix systems administration and scripting in Bash, Python, or similar.

• Good knowledge of cloud security best practices: IAM, RBAC, secrets management, and network security.

• Experience with Helm and GitOps tools (ArgoCD, Flux).

• Solid networking fundamentals: VPCs, subnets, load balancing, DNS, and Kubernetes ingress controllers.

• Ability to troubleshoot distributed systems and debug complex production issues.

• Strong problem-solving skills and the ability to work effectively in a fast-paced team environment.

• AWS Certifications: Solutions Architect Associate/Professional or DevOps Engineer Professional.

• Kubernetes Certifications: CKA or CKAD.

• Experience with Karpenter for EKS node provisioning.

• Exposure to microservices architecture and distributed systems at financial-services scale.

• Experience with AWS API Gateway and Lambda Authorizers for JWT/OIDC-based auth flows.

• Background in cost optimization and performance tuning (Graviton, Spot, Savings Plans).

• Familiarity with identity federation: OIDC, OAuth2, SAML, Auth0 integration.

• Understanding of AI/ML infrastructure: model training pipelines, deployment on EKS, and model monitoring.