Cloud Engineer (AWS, GenAI)

About the Role

We are a small but high-impact cloud team managing end-to-end AWS infrastructure. We are looking for a hands-on engineer to join us across three core areas: GenAI project deliver , cloud platform run/build and cloud security operations.

Role Mission

Support security posture monitoring and remediation follow-up across all AWS accounts, contribute to GenAI-enabled application development, and participate in day-to-day cloud platform operations.

Key Responsibilities

Pillar 1 — GenAI Project Development

1.    Contribute to the development and delivery of internal GenAI applications (e.g. AI-powered budget management tools).

2.    Participate in architecture and design discussions for GenAI workloads on AWS.

3.    Support integration of AWS AI/ML services (Bedrock, Lambda, API Gateway, S3) into application workflows.

4.    Work with AI-assisted development tools including VS Code, GitHub Copilot, Kiro.

5.    Write and maintain technical documentation for GenAI features and components.

Pillar 2 — Cloud Security Operations

1.    Monitor security posture daily using Amazon Inspector, AWS Security Hub, AWS WAF, AWS Shield, and Amazon GuardDuty.

2.    Track, prioritize, and follow up on findings with respective application and infrastructure teams.

3.    Produce and deliver security status reports to management.

4.    Help enforce Security Hub controls and compliance baselines across all AWS accounts.

Pillar 3 — Cloud Platform BAU Run and Build

1.    Support day-to-day operations across the AWS stack: RDS, ECS, EKS, EC2, S3, Lambda, API Gateway, CloudWatch, CloudFront, ELB.

2.    Assist with networking operations including Direct Connect and Transit Gateway route table management.

3.    Support CI/CD pipelines and deployments using GitHub Actions, ArgoCD, Helm and Terraform.

4.    Contribute to observability and monitoring using CloudWatch, Grafana, Prometheus, and Dynatrace.

5.    Participate in FinOps activities including cost visibility, tagging quality, daily cost reporting to management, and optimization follow-up with teams.

6.    Participate in architecture reviews with a focus on secure, scalable, and cost-aware cloud design.

7.    Write and maintain runbooks, technical documentation, and implementation notes.

Required Qualifications

1.    +4 years of hands-on AWS experience.

2.    Good AWS fundamentals: IAM, VPC, EC2, S3, Lambda, API Gateway, CloudWatch.

3.    Exposure to cloud security tooling: Inspector, Security Hub, WAF, Shield, GuardDuty, or equivalent.

4.    Familiarity with FinOps

5.    Comfortable working with Linux CLI and basic system administration.

6.    Familiarity with Configuration as Code (Terraform), CI/CD concepts; GitHub Actions experience is a plus.

7.    Good communication skills with the ability to follow up across teams and report to management.

8.    Strong ownership mindset and collaborative approach.

Preferred Qualifications

1.    Experience with ECS, EKS, ArgoCD, and Helm.

2.    Multi-account AWS exposure: Control Tower, IAM Identity Center.

3.    Experience with observability tooling: Grafana, Prometheus, Dynatrace.

4.    Exposure to GenAI workloads.

5.    Experience with FinOps tooling: Cost Explorer, Budgets, CUR, Savings Plans.

6.    Development experience, preferably with Node.js or Python.

7.    Comfortable with AI-assisted development tools: VS Code, GitHub Copilot, Kiro.