Senior Cloud Engineer

Senior Cloud Engineer
Remote | Product and Development | Full-Time

WHO WE ARE

Headquartered in Nashville, Tenn., Ncontracts leads the industry in integrated risk management and compliance solutions, serving over 5,000 financial institutions nationwide. As a seven-time Inc. 5000 Fastest Growing Companies honoree and consistent year-over-year recipient of "Best Places to Work" awards, we offer a thriving, work environment where career growth and life-work balance go hand in hand.

At Ncontracts, you'll join a team of industry experts dedicated to strengthening the financial services sector through innovation and thought leadership. We're seeking creative, collaborative, and self-driven professionals across all areas of our business - from developing cutting-edge solutions to sales, marketing, customer support, and beyond. Join us in our mission to make the financial industry stronger and more resilient, while advancing your career in a supportive, dynamic environment that values your unique skills and perspectives.

THE ROLE 

We are currently seeking a Senior Cloud Engineer to join our growing team! The Senior Cloud Engineer reports to the Director of Platform Engineering and is responsible for architecting and managing enterprise-scale cloud infrastructure solutions across both Azure and AWS with strong proficiency in both platforms. 

The primary role of the Senior Cloud Engineer is to design and implement mission-critical infrastructure, establish organizational standards, and mentor junior and mid-level engineers. You will make complex architectural decisions in both Azure and AWS, ensuring our infrastructure supports scalability, reliability, and performance optimization. 

You will architect solutions using infrastructure-as-code (Terraform, Azure Bicep, ARM Templates, AWS CloudFormation) and implement enterprise-scale CI/CD pipelines using Azure DevOps, GitHub Actions, and AWS CodePipeline. You will provision and maintain AI service infrastructure, ensuring high availability of model endpoints while implementing gateways, monitoring, and cost attribution workflows. Your work includes designing containerized platforms using AKS and EKS, implementing comprehensive observability using Dynatrace, and managing message queuing systems for event-driven architectures. 

In this role, you will implement security best practices across both platforms including IAM, secrets management, and compliance frameworks. You will perform performance tuning, lead incident response efforts, and optimize cloud spending through FinOps practices. You will mentor L1-L3 engineers, contribute to infrastructure standards and runbooks, and collaborate with development teams to ensure infrastructure supports application requirements. You work with both Azure and AWS platforms daily to support mission-critical production workloads. 

[This position shares an on-call rotation with other teammates. The position is restricted to North America. Normal working hours are Monday through Friday, 8:00AM – 5:00PM, however evening and weekend work may occur.] 

YOU WILL 

• Design and implement cloud infrastructure solutions across Azure and AWS, focusing on scalability, reliability, and performance optimization 
• Build and maintain CI/CD pipelines using Azure DevOps, GitHub Actions, and AWS CodePipeline with automated testing and deployment strategies 
• Implement and optimize containerized applications using Azure Kubernetes Service (AKS), AWS Elastic Kubernetes Service (EKS), and container orchestration with Docker and Kubernetes 
• Develop infrastructure-as-code solutions using Terraform, Azure Bicep, ARM Templates, and AWS CloudFormation with emphasis on modularity and reusability 
• Implement comprehensive observability solutions using Azure Monitor, AWS CloudWatch, Dynatrace, or similar tools, creating dashboards, alerts, and monitoring best practices 
• Provision and maintain AI service infrastructure, ensuring high availability of model endpoints, implementing fallbacks and guardrails, deploying central AI platform components (proxies, gateways, monitoring), and managing observability, logs, and cost attribution workflows 
• Design and manage message queuing systems for event-driven architectures using RabbitMQ, Kafka, Azure Service Bus, AWS SQS/SNS, and third-party solutions 
• Optimize cloud storage solutions across platforms: Azure (Blob Storage, Files, Data Lake Storage) and AWS (S3, EBS, EFS) 
• Implement security best practices across both platforms including: IAM policies and role-based access control (Azure RBAC, AWS IAM), Secrets management (Azure Key Vault, AWS Secrets Manager), Certificate lifecycle management (Azure Key Vault, AWS Certificate Manager), Network security (Azure NSG/Firewall, AWS Security Groups/Network Firewall) 
• Perform performance tuning and scalability optimization for applications, including load testing and capacity planning 
• Conduct incident response, root cause analysis, and implement improvements to prevent recurrence 
• Collaborate with development teams to ensure infrastructure supports application requirements and deployment needs 
• Mentor L1, L2, and L3 engineers on cloud technologies, DevOps practices, and troubleshooting techniques 
• Contribute to infrastructure standards, best practices documentation, and runbook development 
• Support disaster recovery planning and backup/restore procedures with testing and validation 
• Monitor and optimize cloud spending through FinOps practices, implementing cost-saving measures across both platforms 
• Work with both Azure and AWS platforms daily to support mission-critical production workloads 
• The above statements are intended only to describe the general nature of the job and should not be construed as an all-inclusive list of position responsibilities 

YOU BRING (Qualifications) 

• 6+ years of experience in cloud infrastructure, DevOps, or SRE roles with proven technical expertise 
• Strong proficiency in both Azure and AWS cloud platforms with demonstrated capability to architect and implement solutions in either environment 
• Professional-level certifications in both platforms: Azure Solutions Architect Expert (AZ-305) - Required, and AWS Certified Solutions Architect - Professional (SAP-C02) - Required 
• Demonstrated strong proficiency with cloud-native services across both platforms: Compute (Azure VMs/App Service/AKS and AWS EC2/Lambda/EKS), Storage (Azure Blob Storage/Data Lake and AWS S3/Glacier), Networking (Azure VNet/Load Balancer/Application Gateway and AWS VPC/ALB/NLB/API Gateway), Databases (Azure SQL/Cosmos DB/PostgreSQL and AWS RDS/Aurora/DynamoDB), Serverless (Azure Functions/Logic Apps and AWS Lambda/Step Functions), Containers (AKS and EKS) 
• Expert-level proficiency with infrastructure-as-code tools: Multi-cloud (Terraform - required), Azure (Bicep, ARM Templates), AWS (CloudFormation, AWS CDK) 
• Experience building and maintaining CI/CD pipelines across platforms (Azure DevOps, GitHub Actions, AWS CodePipeline) 
• Strong proficiency with observability and monitoring tools: Azure Monitor/Application Insights, AWS CloudWatch/X-Ray, Third-party (Dynatrace, Datadog, Prometheus, Grafana) 
• Experience implementing message queuing systems (Azure Service Bus, AWS SQS/SNS, RabbitMQ, Kafka) 
• Working knowledge of cloud storage solutions and data architectures across both platforms 
• Demonstrated experience with security best practices: Azure AD/Azure RBAC/Azure Key Vault, AWS IAM/AWS Organizations/AWS Secrets Manager, Network security across both platforms 
• Proven ability to perform performance tuning and scalability optimization for production applications 
• Strong problem-solving skills with ability to troubleshoot complex distributed systems independently 
• Excellent communication skills and demonstrated ability to mentor junior and mid-level engineers 
• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience 

BONUS POINTS (Preferred Qualifications) 

• Additional professional certifications: Azure DevOps Engineer Expert (AZ-400), AWS Certified DevOps Engineer - Professional, Azure Security Engineer Associate, AWS Certified Security - Specialty 
• Certified Kubernetes Administrator (CKA) and/or Certified Kubernetes Application Developer (CKAD) 
• Experience architecting complex multi-cloud and hybrid-cloud solutions 
• Hands-on experience with caching solutions (Azure Redis Cache, AWS ElastiCache) 
• Experience with database administration and optimization: Azure SQL Database/Cosmos DB/PostgreSQL for Azure, AWS RDS/Aurora/DynamoDB 
• Experience with distributed search platforms (Azure Cognitive Search, AWS OpenSearch, Elasticsearch) 
• Experience with data platforms and ETL tools: Azure Data Factory/Azure Synapse Analytics, AWS Glue/AWS Data Pipeline, Snowflake/Databricks 
• Deep knowledge of microservices architecture and RESTful API design 
• Experience with deployment automation tools (Octopus Deploy, Spinnaker, ArgoCD) 
• Experience with automated testing frameworks and quality assurance for infrastructure 
• Proficiency with version control workflows (Git flow, trunk-based development) 
• Experience with agile methodologies (Scrum, Kanban) and project management tools 
• Knowledge of compliance frameworks and security standards (SOC 2, ISO 27001, HIPAA, PCI-DSS) 
• Understanding of advanced networking: Azure (VNet peering, Private Link, ExpressRoute), AWS (VPC peering, PrivateLink, Direct Connect) 
• Experience creating technical documentation and knowledge bases 
• Experience with service mesh technologies (Istio, Linkerd, AWS App Mesh) 
• Experience with chaos engineering and resilience testing 
• Contributions to open-source infrastructure or DevOps projects 

WE OFFER

• A fun, fast-paced work environment
• Responsible PTO Plan that meets or exceeds state and local medical and family leave laws
• 11 paid holidays
• Community and social events to keep you connected and engaged
• Mental Health Benefits
• Medical, Dental and Vision insurance
• Company-paid Group Life Insurance, Short- and Long-Term Disability
• Flexible Spending Account & Health Savings Account
• Aflac Benefits – Critical Illness, Cancer Protection, & Hospital Choice
• Pet Insurance
• 401 (k) with company match with eligibility on Day 1 of employment
• 2 Paid Volunteer Time Off Days
• And much more!
   

Compensation Information

Pursuant to state and local law disclosure requirements, the pay range for this role, with final offer amount dependent on education, skills, experience and location is $135,000 to $165,000 per year. This position may be eligible for an annual discretionary incentive award. The incentive award amount is dependent upon company performance and your personal performance and is not guaranteed.

AAP/EEO Statement

Ncontracts provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.