Systems Engineer (Cloud) - Swing Shift

JOB COMPETENCIES

·       AWS depth: Advanced, practical command of AWS infrastructure services across compute, storage, networking and databases, sufficient to design a resilient deployment and to troubleshoot one that is failing.

·       Multi-cloud consistency: Working command of Microsoft Azure alongside AWS, and the judgement to operate both to one standard rather than two divergent practices.

·       Cloud identity command: Practical administration of AWS IAM and Microsoft Entra ID for infrastructure access, including federation, least-privilege role design, managed identities and elimination of long-lived credentials.

·       Infrastructure as code: Treats infrastructure as code held in version control with peer review, state management and a promotion path, rather than as a set of console changes later documented.

·       Automation mindset: Strong Terraform, Ansible, Python and Bash capability applied to provisioning, configuration, patching, remediation and reporting, treating repeated manual work as a defect.

·       Container platform capability: Practical operation of Kubernetes and managed container services, including cluster lifecycle, RBAC, ingress, storage and autoscaling, and the boundary between platform and application.

·       Observability judgement: Builds monitoring that detects failure early and tunes alerting so that what reaches an engineer is actionable rather than noise.

·       Security orientation: Applies hardening baselines, patching and vulnerability remediation to cloud instances and cloud service configuration with the same discipline expected on premises.

·       Resilience focus: Designs for availability zone and region failure where required and proves recovery by test rather than assuming it from a snapshot policy.

·       Operational discipline: Runbook-driven execution, adherence to change control, and structured validation before and after every change, with a tested rollback path.

·       Problem solving: Strong analytical skills with proven ability to identify root cause across compute, network, identity, storage, container and application layers rather than replacing an instance and moving on.

·       Support capability: Supports cloud workloads serving users and business functions, works the agreed shift pattern, and hands over open work explicitly at shift boundaries.

·       Collaboration: Works effectively with application teams, information security, the Wintel and Linux engineers and the M365 Platform Engineer and can hold a platform boundary without becoming a bottleneck.

·       Documentation and knowledge transfer: Clear, maintainable runbooks, architecture documentation and code comments that reduce single-person dependency across shifts.

·       Communication: Excellent written and verbal communication in English, with the ability to explain a cloud outage, a cost variance or an access restriction to technical and business stakeholders in other regions.

Accountability and autonomy: Owns the cloud estate end to end, prioritizes across a broad surface, and makes sound technical decisions with limited information and under incident pressure.

MINIMUM QUALIFICATIONS

·       Bachelor’s degree in computer science, Information Technology, Engineering or a closely related field, or equivalent professional experience. (Required)

·       8+ years of experience in infrastructure engineering or administration, including 5+ years with substantial hands-on responsibility for production cloud infrastructure. (Required)

·       Demonstrated hands-on administration of AWS at production scale, including EC2 and auto scaling, EBS and S3, VPC design, subnets, routing, security groups and peering or Transit Gateway, Route 53, ELB and ALB, and RDS. (Required)

·       Demonstrated hands-on experience with Microsoft Azure infrastructure services. (Required)

·       Demonstrated hands-on administration of AWS IAM, including roles, policies, instance profiles, permission boundaries and least privilege design. (Required)

·       Demonstrated experience with Microsoft Entra ID as it applies to cloud access, including groups, service principals, app registrations, managed identities and federation or single sign-on with AWS. (Required)

·       Demonstrated experience building and maintaining Terraform configurations and modules in production, including remote state, environment separation and a promotion path. (Required)

·       Demonstrated experience with Ansible for configuration management, hardening and patching of cloud instances. (Required)

·       Strong Python and Bash scripting ability, including use of cloud SDKs and APIs such as boto3 for automation and reporting. (Required)

·       Demonstrated experience operating Kubernetes in production, including a managed service such as EKS, ECS or AKS, covering cluster lifecycle, RBAC, ingress, storage and autoscaling. (Required)

·       Demonstrated ownership of patching and operating system currency for cloud instances, including compliance reporting and exception governance against defined standards. (Required)

·       Experience with cloud hardening baselines such as CIS, drift detection and remediation, and remediation of findings from a vulnerability management programme. (Required)

·       Experience with encryption and secrets management in cloud, including KMS key policy and rotation, and a secrets or parameter store. (Required)

·       Demonstrated experience with cloud monitoring and observability tooling, such as CloudWatch, Azure Monitor, Prometheus, Grafana, Datadog, Splunk or ELK, including alert tuning. (Required)

·       Demonstrated experience managing cloud cost and consumption, including right-sizing, commitment planning, tagging governance and variance reporting. (Required)

·       Experience with backup, replication and disaster recovery for cloud workloads, including cross-region or cross-account copies and validation by restore test. (Required)

·       Experience with hybrid connectivity between cloud and on-premises, including VPN or Direct Connect and DNS resolution across environments. (Required)

·       Experience with CI/CD tooling such as GitHub, GitLab, Jenkins or Azure DevOps for delivery of infrastructure change. (Preferred)

·       Experience operating within a formal change-management process, including Change Advisory Board submission, rollback planning and post-implementation review. (Required)

·       Experience working within a shift-based infrastructure team supporting a globally distributed estate, including structured handovers. (Required)

·       Linux administration capability sufficient to build, harden and troubleshoot the instances hosting cloud workloads. (Required)

·       Professional proficiency in spoken and written English, sufficient to coordinate with global infrastructure and application teams and to communicate with senior stakeholders. (Required)

·       Certification such as AWS Certified Solutions Architect – Associate or Professional, or AWS Certified SysOps Administrator. (Preferred)

·       Certification such as Microsoft Azure Administrator (AZ-104), HashiCorp Certified: Terraform Associate, or a Kubernetes credential such as CKA. (Preferred)

ITIL 4 Foundation, or equivalent demonstrated knowledge of incident, change and problem practice. (Preferred)

An Equal Opportunity Employer
All employment decisions are made without regard to unlawful considerations of race, sex, religion, national origin, age, disability, or any other legally protected status. Reasonable accommodations are available upon request.

Disclaimer: This job description indicates in general terms, the type and level of work performed as well as the typical responsibilities of employees in this classification and it may be changed by management at any time. Other duties may also apply. Nothing in this job description changes the at-will employment relationship existing between the Company and its employees.