Cloud Engineer

Role & responsibilities

Purpose of the Role

This is AWS specialist position; you will be the SME for Taco Bell AWS BI infrastructure. You will work with cross-functional partners and third-party vendors to support our restaurant data assets by maintaining the AWS BI services reliability for our business areas collaborating with developers, applications/operational staff, IT project managers, and other technical staff.

You will need to ensure that AWS BI services meet enterprise requirements. Review and manage AWS security, integrity, and backup procedures; and provide training and support for database use to devise and implement processes for resolving faults and data loss. Generate disaster recovery plans.

Responsibilities:

• Infrastructure as Code (IaC):
• Develop and maintain infrastructure using AWS CDK to automate resource provisioning and configuration.
• Implement modular, reusable IaC components with a focus on scalability and maintainability.
• Cloud Management (AWS):
• Implement, monitor, and manage AWS cloud resources (e.g., EC2, S3, RDS, Lambda, VPC, Glue etc.).
• Optimize cloud costs and ensure compliance with security best practices.
• Cloud Security:
• Ensure the security of AWS resources by implementing IAM roles, policies, security groups, and encryption.
• Conduct regular security audits, vulnerability assessments, and penetration testing.
• Monitor for compliance with AWS Well-Architected Framework, CIS Benchmarks, and other security standards.
• DevSecOps Practices:
• Integrate security measures into CI/CD pipelines to ensure secure application deployments.
• Automate vulnerability scanning, patch management, and policy enforcement using tools like AWS Inspector, Snyk, or SonarQube.
• Monitoring & Incident Management:
• Set up monitoring and alerting tools (e.g., CloudWatch, GuardDuty, Security Hub) to detect and respond to security incidents.
• Develop incident response procedures and conduct simulations to ensure team readiness.
• Collaboration & Training:
• Work with developers, QA, and other stakeholders to promote best/secure coding

Preferred candidate profile

Minimum Requirements:

• BE-BTECH with 3-4 years of experience In-depth knowledge and hands-on over AWS Cloud Eco-System related to Security, Storage & Server Architecture, Serverless Computing, and Service interdependency.
• Excellent communication skills
• Experience with AWS CDK for infrastructure provisioning.
• Hands-on experience in managing AWS services (EC2, S3, RDS, Lambda, Glue, etc.).
• Proficiency in scripting and automation using Python, Bash, or PowerShell.
• Experience with containerization and orchestration tools like Docker and Kubernetes.
• Familiarity with version control systems (e.g., Git) and branching strategies.
• Experience with monitoring and logging tools such as CloudWatch, ELK stack, or similar.
• In-depth knowledge of AWS security services (e.g., IAM, KMS, GuardDuty, CloudTrail, WAF).
• Strong understanding of network security, including firewalls, VPNs, and security groups.
• Experience with CI/CD tools and integrating security scans into pipelines (Snyk, Dome9).