Cloud & System Engineer  

Overview:

You will be responsible for the architecture and automation of our entire technical footprint, from the production of Kubernetes clusters serving our customers, to the automated device management systems serving our employees.

Your goal is to eliminate manual toil through scripting, automation, and self-service workflows.

Responsibilities:

A. Production Engineering (Cloud & DevOps)

• Infrastructure as Code (IaC): Deploy and manage cloud-based services (AWS/GCP/Azure) using Terraform or Pulumi. All infrastructure changes must be version-controlled and auditable.
• CI/CD Pipeline Architecture: Design the pipelines that allow our developers to ship code safely and quickly (GitLab CI, GitHub Actions, AWS CodePipeline).
• Container Orchestration: Maintain and optimize Kubernetes clusters, focusing on auto-scaling, security, and self-healing configurations.
• Observability: Implement monitoring and logging stacks to ensure system uptime and rapid incident response.

B. Internal Engineering (IT as Code)

• Zero-Touch Provisioning: Abolish manual laptop setup. Implement MDM solutions (Intune, Jamf, or Kandji) so that new hardware configures itself automatically upon unboxing.
• Identity Automation: Treat Identity as the new perimeter. Manage Azure AD / Entra ID programmatically. Automate onboarding/offboarding via scripts (e.g., auto-provisioning Email, Slack, and Cloud access).
• Network Reliability: Manage office networking (Firewalls, VPNs) using configuration management rather than manual GUI clicking. We also expect you to optimize network performance, and perform network analysis and capacity planning.
• Self-Service Implementation: Build or configure tools that allow users to reset their own passwords, request software access, or troubleshoot common issues without human intervention.

Requirements:

The Mindset

• Automation First: You have a visceral dislike for doing the same manual task twice. You prefer writing a Python script or a Bash function over clicking buttons in a portal.
• Security by Design: You understand that security isn't about buying tools, but about configuring systems correctly (Zero Trust, Least Privilege).

Technical Skills

• Cloud Native: Strong experience with AWS, GCP, or Azure and Kubernetes.
• IaC Proficiency: Deep knowledge of Terraform, AWS CDK, or Pulumi.
• Scripting: Proficiency in Python, Go, or PowerShell. You must be comfortable using APIs (e.g., Microsoft Graph API, AWS SDK) to glue systems together.
• Modern IT Management: Experience with MDM tools (Intune/Jamf) and IdP (Okta/Azure AD) configuration.
• Networking: Understanding of networking protocols (DNS, DHCP, VPN) and how to secure them via code/config.