Cloud Engineer

Job#: 3042106

Job Description:

Role: Cloud Engineer

Location: Hybrid - 4 days/week onsite in SE MI

Duration: Long-Term Contract

Description:

As a Software Engineer on the Cloud Engineering team, you will design, develop, and maintain the cloud platform, infrastructure, and automation tooling that powers our connected vehicle ecosystem. You will play a key role in improving reliability, scalability, security, and cost efficiency across a platform serving millions of vehicles worldwide.

Key Responsibilities

Platform Development & Automation

• Design and build cloud-native solutions that enable automated, repeatable shard provisioning.
• Develop tooling for:
  • Kubernetes cluster bootstrapping
  • Network configuration
  • Service mesh deployment
  • Health validation and readiness checks
• Build control plane capabilities that allow a new shard to be provisioned and production-ready within 24 hours with zero manual intervention.

Infrastructure as Code (IaC)

• Develop and maintain production-grade Terraform modules across AWS and Google Cloud Platform environments.
• Manage GitOps-based infrastructure workflows utilizing Atlantis or similar tools.
• Ensure infrastructure changes are properly reviewed, tested, and fully auditable before production deployment.

Kubernetes & Service Mesh Engineering

• Provision, manage, and automate Kubernetes clusters in AWS EKS and Google GKE environments.
• Create and maintain Helm charts supporting multi-shard deployments across regions and environments.
• Configure and operate Istio service mesh capabilities, including:
  • Traffic management
  • mTLS enforcement
  • Observability and monitoring

Google Cloud Platform (Google Cloud Platform) Engineering

• Design and operate Google Cloud Platform-native platform services, including:
  • Google Kubernetes Engine (GKE)
  • Pub/Sub
  • Cloud Storage
  • Secret Manager
  • Workload Identity Federation
  • VPC Service Controls (VPC-SC)
• Support the phased migration of platform services from AWS to Google Cloud Platform.

API Gateway & Ingress Management

• Design, configure, and operate API gateway technologies such as Tyk, Apigee, or NGINX.
• Implement routing policies, rate limiting, mTLS enforcement, and SLI/SLO metric replication.
• Execute zero-downtime ingress migrations through automation and validation processes.

CI/CD & Deployment Automation

• Develop and maintain CI/CD pipelines using:
  • ArgoCD
  • Tekton
  • Concourse
  • Similar GitOps tools
• Automate deployment controls including:
  • Cluster health validation
  • Fleet distribution verification
  • Rollback triggers
  • Migration orchestration

Security & Compliance

• Implement cloud security best practices across AWS and Google Cloud Platform.
• Manage:
  • IAM role isolation
  • Least-privilege access controls
  • Workload identity
  • Automated access reviews
• Monitor and remediate:
  • Certificate expiration risks
  • Security policy drift
  • Cloud quota thresholds

Observability & Monitoring

• Design and maintain monitoring, alerting, and dashboarding solutions using:
  • Prometheus
  • Grafana
  • Datadog
  • Google Cloud Operations
• Provide visibility into:
  • Platform health
  • Fleet distribution metrics
  • Service reliability and SLO compliance

Automation & Tool Development

• Develop automation scripts and internal tooling using:
  • Python
  • Go
  • Bash
  • Node.js
• Build tools supporting:
  • Migration orchestration
  • Fleet validation
  • Runbook automation
  • Capacity planning

Operational Excellence

• Participate in on-call support rotations.
• Troubleshoot production incidents and platform issues.
• Apply Site Reliability Engineering (SRE) principles to improve system resilience.
• Drive root cause analysis and permanent corrective actions.

Required Qualifications

Education

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field.

Experience

• 5+ years of professional experience in Cloud Engineering, Platform Engineering, DevOps, SRE, or Software Engineering.
• Experience building and operating production infrastructure at scale.
• 3+ years of experience managing cloud infrastructure in AWS and/or Google Cloud Platform.

Technical Skills

• Hands-on experience provisioning and managing Kubernetes clusters (EKS or GKE) in production environments.
• Strong experience with Terraform and Infrastructure as Code (IaC) best practices.
• Experience with GitOps workflows and infrastructure automation.
• Proficiency developing and maintaining Helm charts.
• Strong troubleshooting and problem-solving skills in cloud and distributed systems environments.
• Experience with monitoring and observability platforms such as Prometheus, Grafana, Datadog, or similar solutions.

Core Competencies

Kubernetes Administration

• Cluster operations and upgrades
• Networking and security
• Workload management
• Monitoring and troubleshooting

Infrastructure Engineering

• Platform operations
• Reliability and scalability
• Configuration management
• Operational excellence

Preferred Qualifications

Cloud & Platform Technologies

• Google Cloud Platform (GKE, Pub/Sub, Cloud Storage, Workload Identity, VPC-SC, Cloud Operations)
• AWS cloud services and infrastructure management
• Multi-cloud platform architecture and migration strategies

Kubernetes Ecosystem

• Istio service mesh administration
• Traffic management and observability
• Helm chart development and lifecycle management

API Gateway Technologies

• Tyk
• Apigee
• NGINX
• Routing policies, mTLS, and API governance

CI/CD & Automation

• ArgoCD
• Tekton
• Concourse
• GitOps deployment methodologies

Programming Languages

• Python
• Go
• Java (Spring Boot)
• Node.js
• Bash or PowerShell scripting

Security

• IAM and role-based access control
• OAuth2/OIDC
• mTLS implementation
• Multi-cloud security architecture

Additional Preferred Skills

• gRPC service development
• Protocol Buffers (Protobuf) schema management
• Atlantis, Terragrunt, or collaborative Terraform workflow tools

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at or .

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at or . Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.