Role: AWS Cloud & DevOps Lead
Location: Irvine (CA) or San Antonio (TX) HYBRID
Duration: Long-Term
Function: Cloud Engineering & DevOps
Specialization: Cloud Infrastructure, IaaC, CI/CD & AI-Assisted Engineering
Primary Skills: AWS | Terraform | Harness | OpenAI | GitHub Copilot
Secondary Skills: AWS Bedrock
Role Summary:
The Cloud & DevOps Lead is responsible for designing, building, and governing enterprise-grade cloud infrastructure and software delivery capabilities on AWS. This role leads the end-to-end delivery of cloud infrastructure automation, CI/CD pipeline engineering, and AI-assisted development practices that accelerate engineering velocity, improve deployment quality, and drive operational efficiency at scale.
The Lead owns the technical strategy and hands-on execution across Terraform-based infrastructure as code, Harness-driven software delivery, and the adoption of AI engineering tools including OpenAI, GitHub Copilot, and AWS Bedrock. This role partners closely with product engineering, architecture, security, and business stakeholders to ensure cloud infrastructure and delivery pipelines are robust, secure, cost-efficient, and continuously improving.
Key Responsibilities
Cloud Infrastructure Design & Ownership
- Lead the design, provisioning, and governance of AWS cloud infrastructure supporting enterprise workloads across development, staging, and production environments.
- Architect multi-account AWS environments using AWS Organizations, Service Control Policies (SCPs), and landing zone patterns for security, isolation, and governance.
- Design and own network architecture including VPC design, Transit Gateway, Direct Connect, ALB/NLB, Route 53, CloudFront, and PrivateLink.
- Govern compute and container infrastructure: EC2 Auto Scaling, ECS (Fargate/EC2), EKS, and Lambda — ensuring high availability, fault tolerance, and cost efficiency.
- Own cloud security posture: IAM least-privilege design, KMS key management, Secrets Manager, GuardDuty, Security Hub, and AWS Config rule enforcement.
- Lead cloud resilience design: multi-AZ and multi-region architectures, Route 53 failover routing, backup strategies, and DR runbook ownership.
Infrastructure as Code (Terraform)
- Own and enforce the Terraform IaaC strategy across all AWS environments, including:
- Reusable module library: design, versioning, documentation, and governance standards
AI-Assisted Engineering Adoption
- Lead the strategic rollout and governance of AI engineering tools across the team:
- GitHub Copilot: establish as the standard engineering assistant for Terraform authoring, Python/Shell scripting, Harness YAML, and code review
- OpenAI API (GPT-4 / GPT-4o): integrate into engineering workflows for automated documentation, code generation, change impact analysis, and internal tooling
- AWS Bedrock: prototype and deliver AI-powered internal tools using foundation models (Claude, Titan, Llama) with Bedrock Agents and Knowledge Bases
FinOps & Cost Engineering
- Embed cost engineering practices into infrastructure design and delivery workflows, including:
- AWS resource tagging standards enforced via Terraform modules and Harness pipeline gates
- Cost anomaly detection and alerting using AWS Cost Explorer, Budgets, and Compute Optimizer
- Rightsizing analysis for EC2, RDS, ECS, and managed services with actionable remediation
- Reserved Instance and Savings Plans strategy aligned to workload forecasts
- Establish FinOps-as-code principles: cost constraints and budget guardrails embedded in Terraform and pipeline approval gates.
Required Skills & Experience
Experience
- 10-15+ years of hands-on experience in Cloud Engineering, DevOps, Infrastructure Engineering, or Platform Engineering within enterprise environments.
- Proven track record designing and delivering scalable, secure, and cost-efficient AWS cloud infrastructure at enterprise scale.
- Demonstrated technical leadership across IaaC, CI/CD, and cloud security engineering disciplines.
- Experience leading and mentoring engineering teams and driving DevOps and cloud transformation programmes.
AWS
- Deep expert-level AWS expertise across the full infrastructure stack, including:
- Compute: EC2 (Auto Scaling Groups, Launch Templates, Spot), ECS (Fargate/EC2), EKS, Lambda, and Batch
- Networking: VPC (multi-account, peering, Transit Gateway), ALB/NLB, Route 53, CloudFront, and API Gateway
- Storage & Databases: S3 (lifecycle, replication, access control), RDS (Multi-AZ, Aurora, Read Replicas), DynamoDB, ElastiCache
- Security: IAM (roles, policies, permission boundaries, SCPs), KMS, Secrets Manager, WAF, GuardDuty, Security Hub, and Inspector
Terraform / Infrastructure as Code
- Expert-level Terraform engineering including:
- Module development: reusable, versioned, and well-documented module libraries for AWS resource types
- State management: S3 remote backend, DynamoDB locking, workspace isolation, and import strategies
- Policy as code: Sentinel (HCP Terraform), OPA, or Checkov for compliance enforcement and cost guardrails
- Terraform Cloud / HCP Terraform: remote execution, team-based access control, run triggers, and audit logging
Qualifications
- Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical discipline.
- Postgraduate degree (MS / MBA / M.Tech) is a strong advantage.
Preferred Certifications
- AWS Solutions Architect Professional or AWS DevOps Engineer Professional — required
- AWS Security Specialty — strongly desirable
- HashiCorp Terraform Associate or Professional
- Harness Certified Engineer (CD or CIE track)
- GitHub Copilot or GitHub Actions certification — desirable
- FinOps Practitioner (FinOps Foundation) — desirable
- Certified Kubernetes Administrator (CKA) — desirable for EKS workload ownership