Senior Cloud Engineer - W2 Only

Job Description:

• Formal training or certification on software engineering concepts and 5+ years applied experience
• Strong hands-on experience with Kubernetes, including Custom Resource Definitions (CRDs), operators/controllers, reconciliation patterns, admission webhooks, and RBAC.
• Proficiency in Go (Golang), with experience building and supporting production-grade services, controllers, or platform components.
• Strong knowledge of AWS cloud services, including Amazon EKS, IAM, STS, VPC networking, and workload identity solutions such as IRSA and EKS Pod Identity.
• Solid understanding of Kubernetes and cloud networking concepts, including Services, EndpointSlices, Ingress controllers, Application and Network Load Balancers (ALB/NLB), Network Policies, CNI plugins, and troubleshooting cross-node or cross-cluster network communication.
• Proven experience designing, building, and operating highly available, production-scale platform services and CI/CD pipelines.
• Hands-on experience with automated testing frameworks and methodologies, including integration, regression, performance, end-to-end, and smoke testing.
• Demonstrated ability to work independently in a fast-paced environment with strong organizational, analytical, and problem-solving skills. A high level of attention to detail, ownership, and accountability is essential.
• Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
• Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices.

• Own and enhance Kubernetes Custom Resource Definitions (CRDs) and Go-based controllers that manage the complete lifecycle of platform capabilities, from request and provisioning through reconciliation and safe decommissioning across multiple clusters and cloud accounts.
• Design, implement, and strengthen admission controls, including validating and mutating webhooks, to enforce platform standards such as immutable provenance, tenant isolation, namespace integrity, and dependency-aware deletion safeguards.
• Develop and maintain secure cross-cluster communication and provisioning mechanisms, including resource proxies, Kubernetes RBAC, identity federation, STS integrations, and least-privilege access models using IRSA and Amazon EKS Pod Identity.
• Advance developer-facing platform experiences by building and improving Terraform providers, Feature Gateway APIs, authentication and authorization frameworks, context-aware routing, and composition engines that translate declarative intent into managed cloud resources.
• Lead deployment and rollout strategies for multi-region and multi-cluster environments, including environment promotion, phased production releases, dependency-aware orchestration, and Infrastructure-as-Code (IaC) and GitOps automation.
• Drive engineering excellence through scalable design patterns, idempotent reconciliation, automated testing, CI/CD reliability, security and threat-model reviews, architecture decision records (ADRs), and adoption of shared frameworks.