Cloud Automation Engineer

Roles & Responsibilities

1. Ansible Automation Design and maintain enterprise-grade playbooks, roles, and collections. Automate OS patching, configuration drift correction, security hardening, and compliance enforcement across AWS, Azure, VMware, and REST-integrated environments. Combine Ansible with Terraform for seamless post-provisioning configuration.
2. AWS Cloud Automation Architect serverless and event-driven automation using Lambda, Step Functions, EventBridge, SNS/SQS, S3 triggers, and Systems Manager. Build scalable, cross-account automation across AWS Organizations with proper IAM boundaries. Align all implementations with CIS, NIST, and AWS Well-Architected standards.
3. Kubernetes & Helm Develop and own custom Helm charts for multi-environment Kubernetes deployments. Manage the full Helm lifecycle including upgrades, rollbacks, and canary releases. Drive GitOps adoption using ArgoCD or Flux. Automate namespace management, RBAC, secrets, and network policies.
4. Infrastructure as Code & CI/CD Build reusable, versioned Terraform modules covering AWS networking, IAM, EKS, ECS, RDS, and security controls. Implement CI/CD pipelines for IaC using GitHub Actions or Azure DevOps — with automated testing, linting, drift detection, and policy enforcement baked in.
5. Security & Compliance Automation Automate CIS benchmark enforcement, vulnerability remediation, and infrastructure hardening. Integrate with CyberArk, AWS Secrets Manager, and SSM Parameter Store. Implement policy-as-code using OPA, Gatekeeper, or Conftest. Automate certificate lifecycle management end to end.
6. Observability & Auto-Remediation Connect automation workflows to New Relic and LogicMonitor for telemetry-driven triggers. Build self-healing routines that detect, diagnose, and resolve incidents automatically. Convert operational runbooks into fully automated diagnostic workflows to cut MTTR significantly.
7. ITSM Integration Integrate automation into SymphonyAI-driven ticketing, approval flows, CMDB updates, and change management processes. Build operational runbooks that map directly to ITSM workflows.

Ideal Candidate

1. Strong Automation Architect Profile with cloud-based automation strategy and framework architecture
2. Mandatory (Experience 1) – Must have 8+ years of total experience with the last 6 years focused continuously on hands-on automation, including automation strategy and framework architecture
3. Mandatory (Experience 2) – Must have hands-on expertise building automation using industry automation tools and frameworks.
4. Mandatory (Experience 3) – Must have a proven record designing scalable automation solutions and leading automation initiatives end to end.
5. Mandatory (Experience 4) – Must have deep Terraform knowledge, including reusable module design covering AWS networking, IAM, EKS, ECS, RDS, and security controls — with CI/CD integration (GitHub Actions or Azure DevOps) including automated testing, linting, drift detection, and policy enforcement
6. Mandatory (Experience 5) – Must have solid AWS architecture knowledge, including serverless and event-driven automation (Lambda, Step Functions, Event Bridge, SNS/SQS, S3 triggers, Systems Manager), IAM design, cross-account automation across AWS Organizations, and multi-account networking aligned with CIS, NIST, and AWS Well-Architected standards
7. Mandatory (Experience 6) – Must have experience with security and compliance automation including CIS benchmark enforcement, vulnerability remediation, infrastructure hardening, certificate lifecycle management, and integration with CyberArk, AWS Secrets Manager, and SSM Parameter Store
8. Mandatory (Skill) – Must have proficiency in Python, Bash, or PowerShell for automation scripting, with proven ability to build production-grade automation frameworks end-to-end
9. Mandatory (Title) – Current title must include "Architect". Candidates currently titled Automation Engineer, QA Automation Lead, DevOps Engineer, Cloud Engineer, or other non-architect profiles will not be considered
10. Preferred (Skill 1) – Experience with policy-as-code (OPA, Gatekeeper, Conftest) and IaC testing tools (Molecule, Terratest, Checkov, tfsec)
11. Preferred (Skill 2) – Experience with multi-account AWS automation, service mesh (Istio/Linkerd), and ITSM integration (SymphonyAI or equivalent — ticketing, approval flows, CMDB updates, change management)

Cloud Engineers – 2nd Shift – 4+ Years Experience

Required Qualifications:

• Strong experience in AWS infrastructure components and operational management (e.g., EC2, S3, VPC, IAM).
• Proficiency in IaC tools such as Terraform and/or CloudFormation.
• Solid scripting skills in Python, Bash, or equivalent for automation tasks.
• Experience with monitoring and logging tools (e.g., CloudWatch, Prometheus, ELK).
• Familiarity with network fundamentals: DNS, firewall rules, virtual networks.
• Strong troubleshooting mindset and experience resolving production-level issues.
• Excellent documentation and communication skills to maintain system knowledge and collaborate with teams.

Preferred Qualifications:

• AWS certifications (e.g., SysOps Administrator).
• Experience with containerization (Docker, Kubernetes/EKS/ECS).
• Exposure to CI/CD tooling like Terraform, DevOps, GitHub Actions, or any other DevOps tools.
• CI/CD pipeline, infra pipelines.
• AWS services like compute, network, storage, security.
• Migration experience like Discovery/Assessments, TA, Infra Design.

Tasks & Responsibilities: (Major task and role person will have to perform – list all the relevant points)    

Together with the Business Cloud Services team, you will design, deploy, and operate a cloud‑native Kubernetes PaaS platform on Azure, ensuring high availability, security, and operational excellence.

Your main duties include:

·      Drive cloud‑native automation and self‑service capabilities, ensuring platform security, availability, and disaster recovery readiness

·      Design, operate, and continuously improve Kubernetes clusters and PaaS environments on Azure / AKS

·      Collaborate closely with development teams on deployment strategies, operational requirements, and platform integration

·      Review and maintain infrastructure‑as‑code configurations, CI/CD pipelines, and cloud‑native deployments

·      Build and maintain CI/CD pipelines using Azure DevOps

·      Implement and operate infrastructure‑as‑code solutions using Terraform, Helm, and Ansible

·      Manage containerized workloads and orchestration across cloud‑native environments

·      Set up, operate, and enhance monitoring, logging, and alerting stacks using tools such as Prometheus and Grafana

·      Coordinate with support teams on platform incidents, escalations, and post‑incident analysis

·      Contribute to incident response, continuous improvement, and operational stability

·      Support the development and refinement of DevOps practices, runbooks, and operational standards

·      Actively contributes to improving developer experience and platform reliability

Education & Trainings + Certifications: (Basic & Professional)

·      Bachelor’s degree (Preferably engineering graduate)

·      Azure Solutions Architect Expert Certification is a plus.

·      (optional) ITIL Foundation 

Technical know-how: (Mention the technology on which person must be experienced)

Mandatory

o  Bachelor’s degree in computer science, Information Systems, or a related field

o  5+ years of relevant professional experience in DevOps, Cloud Engineering, or Platform Engineering roles

o  Strong Linux system administration skills for operating production‑grade cloud‑native platforms

o  Proven experience with Microsoft Azure, including AKS and Azure DevOps tooling

o  Strong expertise in Kubernetes, including cluster operations, RBAC, networking, and storage

o  Hands‑on experience with container technologies such as Docker and container registries

o  Proficiency with Terraform, Helm, Ansible, and PowerShell

o  Experience building and operating CI/CD pipelines using Azure DevOps or equivalent tools

o  Cloud‑native monitoring and observability experience using Prometheus, Grafana, and alerting pipelines

o  Solid understanding of security and compliance requirements such as PCI DSS and SOC2

o  Scripting skills for automation and tooling (Bash, Python, PowerShell)

o  Practical experience using Git for version control

o  Excellent communication skills in English (Spanish is a plus)

o  Automation‑first mindset and strong collaboration skills within Agile teams

Good to know

Principles of Agile Software Development.

·      GitHub Actions, GitLab CI, Jenkins, Azure DevOps

·      Containers: Docker, Kubernetes (EKS / AKS / GKE)

·      Configuration Management: Ansible

ote: VMware HCX (now VCF Operations Workload Mobility)

Mandatory Skills:

• Strong knowledge and hands-on experience with VMWare technologies, including vSphere, vCenter, VMwareHCX, and ESXi.
• Proficiency in managing virtualized environments and understanding of virtualization best practices.
• Experience with infrastructure monitoring tools and performance tuning.
• Solid understanding of networking concepts and protocols.
• Familiarity with backup and disaster recovery solutions.
• Strong problem-solving skills and the ability to work under pressure.

This is a senior role in our Application & Database Modernization pillar, on a specific mission: leading a large-scale VMware-to-AWS migration and landing it in production. VMware estates are exactly where modernization programs go to stall — sprawling dependency graphs, undocumented workloads, and a hypervisor bill that grows while the migration deck gathers dust. Our customers need that estate moved, cut over, and retired, on a date in the contract.

You'll lead the design and implementation of the target infrastructure: Landing Zones built to AWS best practices, EKS-based container platforms, Infrastructure as Code across the stack with Terraform and CloudFormation, and HA, DR, security, and backup strategies that hold up in production. Aedeon absorbs the discovery, dependency-mapping, and validation grind that would otherwise consume the project's first two quarters. You own the judgment calls, architecture tradeoffs, cutover sequencing, risk decisions and you carry them through to production. You'll also mentor engineers and shape long-term infrastructure strategy with customer stakeholders. If you want your migration experience to end in retired VMware clusters rather than revised project plans, this is the role.

What you will do?

• Lead the design and implementation of infrastructure for a large-scale VMware-to-AWS migration — from discovery through production cutover.
• Architect and build secure, scalable, and highly available AWS environments, including Landing Zones that follow AWS best practices.
• Design and implement containerized application platforms on Amazon EKS; exposure to ECS is a plus.
• Implement Infrastructure as Code using Terraform and AWS CloudFormation.
• Define and enforce best practices across security, backups, high availability (HA), disaster recovery (DR), monitoring, and operations.
• Enable configuration management using tools such as Ansible, Chef, or similar.
• Build CI/CD pipelines and manage the complete build and release lifecycle for customer applications.
• Drive automation across provisioning, deployment, and operational workflows.
• Retire legacy infrastructure and land cloud-native architectures in its place.
• Improve and maintain DevOps platforms: Jenkins, Git repositories, monitoring, and observability stacks.
• Provide L3-level support for complex infrastructure and platform issues.
• Work with stakeholders on technical strategy and long-term architecture.
• Mentor engineers, contribute to talent evaluation, and support team development.

What are we looking for?

• 6+ years of hands-on DevOps experience, with strong expertise in designing and managing cloud infrastructure.
• Strong experience in VMware-to-AWS migration projects or large-scale infrastructure migrations.
• 4+ years of Terraform and CloudFormation for Infrastructure as Code (IaC).
• 4+ years in configuration management, systems engineering, and managing production-grade infrastructure.
• Solid Linux and/or Windows administration background.
• Deep understanding of AWS services, including VPC, EC2, IAM, EKS, ECS, RDS, S3, Backup, CloudWatch, etc.
• Experience with Kubernetes (EKS), ECS, and Docker in production environments.
• Hands-on experience designing HA, DR, security, and backup strategies.
• Experience with Landing Zone setup, multi-account strategy, and AWS governance frameworks.
• Proficiency in Git with a strong understanding of branching and merging strategies.
• Experience with CI/CD pipelines, automation, and operational tooling.
• A problem-solving mindset that's proactive and oriented toward reliability, performance, and scalability.

You will be preferred if

• Experience across multiple cloud platforms (AWS, Azure, GCP).
• AWS certifications such as Solutions Architect Associate/Professional or DevOps Engineer Professional.
• Exposure to data platforms such as Amazon EMR, Redshift, Lake Formation, and SageMaker.
• Experience designing cloud architectures at an L3/Architect level.