Padmi

AWS Cloud Engineer with Gen AI

TrivandrumPosted 1 month ago
Infrastructure And DatabasesSenior
Apply at UST

Opens the source posting on usource.ripplehire.com

Source description

About the role

View original

Position Overview We are looking for a highly skilled Infrastructure Engineer with strong expertise in AWS Cloud Infrastructure, Platform Engineering, DevOps, Cloud Security, and Infrastructure Automation . The ideal candidate will be responsible for designing, implementing, securing, and optimizing highly available, scalable, and cloud-native infrastructure on AWS. This role will play a key part in building secure enterprise platforms supporting modern cloud applications, containerized workloads, and next-generation AI/GenAI services powered by Amazon Bedrock and AWS AgentCore . You will collaborate closely with Platform Engineering, DevOps, Security, Architecture, and Application teams to deliver resilient, compliant, and automated cloud environments aligned with enterprise standards. Key Responsibilities 1. AWS Cloud Infrastructure & Networking

Design, implement, and manage scalable AWS infrastructure following Well-Architected Framework best practices. Configure and maintain AWS networking services including:

Amazon VPC Public & Private Subnets Route Tables Security Groups Network ACLs Internet Gateway NAT Gateway AWS Transit Gateway VPC Endpoints / AWS PrivateLink Amazon Route 53 Application & Network Load Balancers (ALB/NLB) AWS WAF Amazon CloudFront

Build highly available, fault-tolerant, and disaster recovery-ready cloud environments. Optimize network performance, security, and connectivity across multi-account AWS environments.

  1. Infrastructure as Code (IaC) & Automation

Develop reusable Infrastructure-as-Code modules using:

Terraform AWS CDK AWS CloudFormation

Automate infrastructure provisioning and lifecycle management. Implement infrastructure versioning, modularization, and reusable deployment patterns. Enforce governance through Policy-as-Code and automated compliance validation.

  1. Platform Engineering & Container Services

Deploy and manage cloud-native applications using:

Kubernetes Amazon EKS Amazon ECS/Fargate Docker

Build scalable and secure container platforms. Support application modernization initiatives and cloud-native platform adoption. Improve platform reliability, scalability, and operational efficiency.

  1. AI / GenAI Infrastructure

Provision and manage secure infrastructure supporting:

Amazon Bedrock AWS AgentCore

Design secure networking and access controls for AI workloads. Implement monitoring, logging, and operational controls for AI platform services. Collaborate with AI engineering teams to deliver scalable GenAI infrastructure.

  1. Cloud Security & Compliance

Design and implement AWS cloud security best practices. Configure and manage:

AWS IAM AWS KMS AWS Secrets Manager

Implement enterprise-grade security controls including:

Mutual TLS (mTLS) OAuth 2.0 / OpenID Connect (OIDC) API Security Rate Limiting PHI Data Protection & Tokenization

Ensure cloud infrastructure complies with organizational security standards and regulatory requirements.

  1. Observability & Reliability Engineering

Implement enterprise observability using:

Amazon CloudWatch OpenTelemetry

Develop dashboards, s, and operational runbooks. Perform production troubleshooting, root cause analysis (RCA), and incident remediation. Improve platform reliability through proactive monitoring and automation.

  1. FinOps & Cloud Cost Optimization

Monitor cloud resource utilization and infrastructure spend. Recommend and implement cost optimization strategies. Support cloud budgeting, forecasting, and governance initiatives. Optimize compute, storage, networking, and managed service costs without compromising performance.

  1. DevOps & Collaboration

Maintain Infrastructure-as-Code repositories using Git/GitHub. Integrate infrastructure deployments into CI/CD pipelines. Collaborate with Security, DevOps, SRE, Platform Engineering, and Application teams to deliver secure and automated cloud solutions. Promote DevSecOps best practices across engineering teams.

Required Technical Skills AWS Cloud Services

Amazon VPC Route 53 Transit Gateway AWS PrivateLink ALB / NLB AWS WAF CloudFront IAM AWS KMS AWS Secrets Manager Amazon Bedrock AWS AgentCore

Infrastructure as Code

Terraform AWS CDK AWS CloudFormation

Containers & Platform Engineering

Kubernetes Amazon EKS Amazon ECS/Fargate Docker

Monitoring & Observability

Amazon CloudWatch OpenTelemetry

Security

IAM mTLS OAuth 2.0 / OIDC API Security Rate Limiting PHI Tokenization Encryption & Key Management

DevOps

Git GitHub CI/CD Pipelines Infrastructure Automation

Cloud Operations

Incident Management Root Cause Analysis Reliability Engineering Disaster Recovery High Availability FinOps / Cloud Cost Optimization

Preferred Qualifications

Experience supporting Healthcare , Life Sciences , or other regulated industries. Good understanding of HIPAA , HITRUST , and cloud compliance frameworks. Hands-on experience with Amazon Bedrock , GenAI , and AI platform infrastructure. Exposure to Platform Engineering , Site Reliability Engineering (SRE) , and DevSecOps practices. Experience implementing Policy-as-Code , cloud governance, and security automation. AWS certifications such as AWS Certified Solutions Architect – Associate/Professional , AWS Certified Security – Specialty , or AWS Certified DevOps Engineer – Professional are highly desirable.

Required Experience

5–9 years of hands-on experience in AWS Cloud Infrastructure, Platform Engineering, DevOps, Cloud Security, and Infrastructure Automation . Proven experience designing and managing enterprise-scale AWS environments using Infrastructure as Code. Strong knowledge of container orchestration, cloud networking, cloud security, monitoring, and automation. Experience supporting mission-critical, highly available production environments with a focus on security, scalability, and operational excellence.

Primary Skills AWS • Terraform • Kubernetes • Amazon EKS • Docker • AWS Networking • IAM • Cloud Security • CloudFormation • AWS CDK • CloudWatch • OpenTelemetry • Git • CI/CD • FinOps • Amazon Bedrock • AgentCore • DevSecOps • Platform Engineering • SRE

Infrastructure as Code, AWS, Kubernetes, Amazon Bedrock

One address, no account. We’ll tell you when matching roles go live.

More at UST

Related open roles

View all roles