Cloud Engineer

About the Role

The Cloud Engineer at KBX is an individual contributor responsible for operating, maintaining, and improving the cloud platform that supports application teams. This role is suited to someone early in their cloud engineering career who has strong technical fundamentals, follows established designs and standards, collaborates well, and can reliably carry work through implementation and operational support.

Key Responsibilities

• Build and support AWS infrastructure using established designs, security controls, and change-management practices.
• Work with senior engineers to clarify requirements and technical decisions.
• Maintain, monitor, upgrade, and troubleshoot cloud platform technologies, including Amazon EKS, Istio, Solo Gloo, Kong, Amazon MSK/Kafka, and Redis/ElastiCache.
• Use Terraform, Helm, and GitHub Actions to provision infrastructure and deploy platform changes.
• Manage IAM, access, networking, encryption, and secrets requests using established standards.
• Identify automation opportunities and resolve security risks or unclear requirements with the team.
• Monitor platform health, respond to alerts and incidents, troubleshoot issues with application teams, and escalate complex problems.
• Apply tagging standards, support cost reporting, investigate waste, and implement approved cost-saving changes.
• Investigate issues using documentation and operational data, ask for help when needed, and verify work before closing it.
• Maintain implementation notes, runbooks, request records, and troubleshooting guides. Share lessons with the team.
• Build AWS and cloud platform skills through hands-on work, training, certifications, and feedback.
• Participate in the on-call rotation, respond to incidents, communicate impact, and help prevent repeat issues.

Requirements & Tech Stack

• Experience applying core AWS concepts and services such as compute, networking, storage, IAM, security groups, subnets, routing, and monitoring.
• Experience deploying, managing, or supporting containerized applications in Kubernetes environments.
• Experience scripting in Python, PowerShell, or shell.
• Experience applying cloud security, identity and access management, monitoring, logging, incident response, and change-management best practices.
• An ability to use AI-assisted tools to support learning, scripting, analysis, documentation, troubleshooting, and operational workflows.

Qualifications

• Entry-level candidates are welcome.
• Experience through employment, internships, labs, coursework, certifications, or personal projects involving AWS, cloud infrastructure, systems administration, networking, software development, or DevOps.
• Familiarity with Amazon EKS, ingress controllers, container networking, or service mesh technologies is a plus.
• Bachelor's degree in computer science or Information Technology field is a plus.
• Experience supporting cloud infrastructure, internal platforms, application teams, service requests, or operational queues in an internship, academic, lab, or professional setting is a plus.
• Experience using Terraform, source control, or CI/CD automation is a plus.
• Experience working with Amazon EKS, ingress, container networking, or service mesh technologies is valuable but not required.
• Experience using service mesh technologies (Istio or similar) and API gateway technologies such as Gloo/kgateway, Kong, or equivalent in a production setting is a plus.
• Using GitOps methodologies and tools (Argo CD) for continuous deployment on Kubernetes is a plus.
• Experience with Cloudflare or similar CDN/DNS/web security platforms for cloud networking and traffic management is a plus.
• Experience working in a hybrid cloud or multi-cloud environments and integrating on-premises systems with AWS cloud resources (networking, identity federation, etc.) is a plus.
• AWS Certified Solutions Architect - Associate, AWS Certified CloudOps Engineer - Associate, or another relevant AWS certification is a plus.
• Certified Kubernetes Administrator (CKA), HashiCorp Certified: Terraform Associate, or similar cloud/platform certification is a plus.