Cloud Engineer

Generic title: Cloud Engineer

Department: IT

PURPOSE OF THE ROLE

To design, implement, and manage a secure, scalable, and cost-effective cloud ecosystem that

supports the storage, processing, and protection of electronic Protected Health Information

The Cloud Engineer will align cloud strategies with organizational goals, ensuring

compliance with regulatory standards while minimizing operational expenses

SCOPE OF THE ROLE

Will lead: Cloud Infrastructure Team, Vendor Partnerships

Will report to: IT Head/COO

Interactions: Cross-functional IT teams, Healthcare Stakeholders, Cloud

Service

Providers CSPsAuditors, and Regulatory Bodies.

Will support: Unnati Digital Solutions Pvt. Ltd. For IT Infrastructure.

KEY AREAS OF FOCUS

STRATEGY

1. Cloud Architecture Planning: Design multi-cloud (AWS/Azure) solutions

optimized for healthcare workloads, MTS Systems, including disaster recovery,

auto-scaling, and data redundancy.

2. Cost Optimization Roadmap: Implement reserved instances, spot

instances, and savings plans to reduce cloud spending by 4060% while

maintaining performance.

3. Compliance Frameworks: Develop policies for Cybersecurity and personal

information, GDPR, and ISO 27001 compliance, including Business Associate

Agreements with CSPs.

4. Maintaining Uptime of Cloud as well as IT Infrastructure: Maintain

Uptime of Cloud as well as IT infrastructure for Software team.

OPERATIONAL

Cloud Infrastructure Managemen

Deploy and maintain Cybersecurity and personal information -eligible services

for Azure Devops on various clouds like Protean, Cloud Jiffy, ensuring 99.99%

uptime for Electronic Patient Health Information storage and retrieval systems.

Automate resource provisioning using Infrastructure-as-Code tools like

Terraform and tools similar to it AWS

Optimize storage tiers Eg. S3 Glacier, Azure Cool Blob for medical imaging

archives, reducing costs by 30%. Use Mongo DB for Image storing. Configure

Image processing Softwares.

Cybersecurity & Compliance

Enforce end-to-end encryption AES-256for data at rest and in transit, aligned

with NIST guidelines.

Configure Identity and Access Management with multi-factor

authentication MFA and role-based access controls RBACfor ePHI

Electronic Patient Health Information

Conduct quarterly penetration testing and vulnerability assessments; remediate

risks within SLA.

Cost & Performance Monitoring

Utilize Tools similar to Azure Cost Management to track spending, set budget

alerts, and eliminate idle resources orphaned snapshots

Right-size EC2 like instances and VMs using performance analytics, achieving

2030% cost savingsData Governance & Disaster Recovery

Build encrypted data pipelines for real-time analytics using tools similar to AWS

Glue or Azure Data Factory.

Implement cross-region backups with RPO 15 minutes and RTO 1 hour for

critical healthcare applications.

Team

Mentor IT teams on cloud best practices, including CI and CD pipelines and DevOps

integration.

Conduct Cybersecurity and personal information compliance workshops for

staff emphasizing data handling protocols.

General IT operations

Activities

Planning, procurement, implementing, troubleshooting, infrastructure

resources, thin-client system

Manage servers in an active directory environment & thin client

architecture, tires to ensure as closed to 100% uptime as possible

Troubleshoots problems with networks, web services, mail services

Routine audits of systems & software ,ensure data is backed up on regular

basis

System performance tuning ,backups, applying operating system updates,

patches & recovery

Providing seamless internet connectivity, Email id creation, Remote

supports over internet to all remote user all over Revmax braches

Resolving Desktop Level 2 &3 Technical queries, troubleshooting L2 & L3

network appliances

Net Access Restriction based on content & website name filtering & logging

Authorizing, encoding, creating & mastering videos, digital images

conversation ,resizing , color separation & optimizing for printing & mailing

Support

Maintaining a stable working environment

Ensuring that the network infrastructure is up and running

Analyzing system logs and identifying potential issues with computer

systems

Introducing and integrating new technologies into existing environment

Performance routine audits of systems and software

Installing and configuring new hardware and software

System performance tuning

Providing user Email id and Maintaining Email Disk usage and quotas.

Providing user id existence on server

Handling technical queries

Troubleshooting any reported problems

Allocation /Allocation of IT Assets

Installation & maintenance of IT assets in Pan India Revmax offices

Providing restricted & monitored access to internet

Maintaining interconnectivity of remote office through internet

Perform schedule backup of data on user request

Providing IT support to users across all offices

Maintenance of website internet and intranet

Applying Hot fixes, updates, patches & definitions

Maintaining Disk usage & quotas for every user file server

Monitoring unauthorized access to all IT assets

Monitoring & logging users internet activity

Users Restriction for data, Email and Internet.

Filtering & monitoring any unauthorized software data on Revmax

Network

Penalties and Due Process

Remote PC repair and Administration to support branch offices and

remote laptop users

Procurement of IT assets and Consumables

Annual maintenance Contract AMC of all the IT devices

Installing, Troubleshooting, Development and support of project Specified

software and Hardware as and when required by Management.

Escalate support issues appropriately at the right time

Ensure timely completion of project

Maintain all records as per ISO standards

Adhere to all ISO policies & processes

Adhere to company & departmental polices & procedures like communication

protocols, operational practices / procedures, Information security practices,

attendance, procedures, etc

Ensure data confidentially, integrity & protection of company’s property

Performs any other work assigned by the Management from time to time as per

organizational priority

CORPORATE ALIGNMENT

Champion ISO 27001 certification processes, liaising with auditors to ensure

cloud infrastructure meets standards.

Align cloud SLAs with business objectives, reporting KPIs to senior management

via monthly MIS.

Ensure discipline, professional work ethic and collaborative, productive work

relationships within the company.

Ensure productive work relationships are established with all relevant internal

departments.

Ensure data confidentiality, integrity and protection of company's intellectual

property.

Participate in cultural, social and fun events with an open mind in order to

create camaraderie and collaborative team spirit. Respect and recognize

differences and ensure inclusive behavior.

COMPETENCIES

1. Technical Expertise: Proficiency in Azure Devops services Eg. (EC2, S3,

Lambda, Azure Blob), Kubernetes, and tools like Terraform.

2. Regulatory Knowledge: Deep understanding of Cybersecurity and personal

information Security Rule, HITECH Act, and ISO 27001 controls.

3. Cost Management: Demonstrated success in reducing cloud spend while

scaling infrastructure.

4. Incident Response: Ability to mitigate DDoS attacks, ransomware, and data

breaches within Cybersecurity and personal information -mandated timelines

.

KNOWLEDGE SKILLS CAPABILITIES

Relevant domain Hard worker Learning mindset

knowledge

Basic Communication skills Result oriented

Interpersonal skills Quality orientation

Ability to work in fast-paced Cu stomer centricity

cloud environments.

Process centricity

Team work

UNIQUE CIRCUMSTANCES

Travel (national) may be required

During emergency situation ready to be on call 24*7 to ensure uptime of IT infra.

Visit location if required to resolve any emergency calls impacting the functionality.