Cloud Engineer

Plutus21 is seeking a talented Cloud Engineer to join our core platform team. In this role, you will take full ownership of deployment, tenant isolation, and platform operations across multiple client environments. Whether hosted by Plutus21 or within a client’s own cloud infrastructure, you will ensure the platform runs securely and consistently. Protecting client data through strict isolation is a top priority. You will work closely with the Principal Platform Engineer and AI Engineer to scale the platform effectively across diverse clients and products, contributing to a secure and highly available cloud environment.

Key Responsibilities

- Package the platform as a containerized deployment unit customized for each client, ensuring consistent code execution across all environments.
- Develop and maintain infrastructure-as-code modules using Terraform or Pulumi, initially focusing on AWS with plans to support additional cloud providers.
- Ensure portability of stateful components such as PostgreSQL databases, S3-compatible object storage, OIDC identity providers, and pluggable secrets management systems.
- Implement and rigorously test tenant isolation, including isolation between sub-tenants within a single client environment.
- Control data egress at the infrastructure level, allowing only declared and client-authorized outbound connections.
- Manage hybrid deployments in client-hosted environments, enabling outbound-only connections to the control plane for releases and health monitoring without transferring client data.
- Define and uphold the shared-responsibility model and service level agreements (SLAs) for client-hosted environments.
- Oversee upgrades and releases across multiple environments within supported version windows, preventing configuration drift.
- Establish baseline security and observability measures such as single sign-on (SSO), audit logging, encryption, monitoring, and alerting.
- Produce clear design documentation and runbooks, thoroughly documenting decisions before implementation begins.

Required Qualifications

- Proven experience managing Terraform or Pulumi codebases in production, including creating reusable modules and carefully handling state and configuration drift.
- Hands-on expertise running Kubernetes or equivalent orchestration platforms across multiple environments.
- Deep knowledge of at least one major cloud provider, preferably AWS, including strategies to avoid vendor lock-in where critical.
- Demonstrated experience operating PostgreSQL and object storage in production, including backups, restores, and upgrades.
- Strong understanding of tenant isolation, private networking, egress control, and secrets management, with the ability to implement these effectively.
- Experience with CI/CD pipelines and managing versioned releases across multiple environments without configuration drift.
- Excellent written communication skills, capable of producing clear design notes and operational runbooks.

Preferred Qualifications and Benefits

- Experience deploying software into customers’ own cloud accounts is highly desirable.
- Background in regulated environments such as financial data or privacy-sensitive sectors, or familiarity with SOC 2 readiness, is a plus.
- Experience with additional cloud providers like Google Cloud Platform (GCP) or Microsoft Azure is advantageous.
- Familiarity with GitOps practices and policy-as-code frameworks is beneficial.
- Experience operating platforms that support AI or large language model (LLM) workloads is a plus.

This position offers the chance to work at the cutting edge of cloud platform engineering, contributing to a secure, scalable, and client-focused product environment. If you are passionate about cloud infrastructure, security, and operational excellence, Plutus21 welcomes you to join our innovative team.