Cloud Engineer

Plutus21 is looking for a skilled Cloud Engineer to join our core platform team. In this role, you will take ownership of deployment processes, tenant isolation, and overall platform operations. You will be responsible for packaging and operating the platform across various client environments, whether hosted by Plutus21 or within a client’s own cloud infrastructure, ensuring data security and isolation at all times. Collaboration with the Principal Platform Engineer and AI Engineer is crucial to successfully scaling the platform across multiple clients and products.

Key Responsibilities

- Package the platform as a containerized deployment unit tailored for each client, ensuring identical code runs consistently across all environments.
- Develop and maintain infrastructure-as-code modules using Terraform or Pulumi, initially focusing on AWS with plans to extend support to other cloud providers.
- Ensure portability of stateful components such as PostgreSQL databases, S3-compatible object storage, OIDC identity providers, and modular secrets management systems.
- Implement and rigorously test tenant isolation mechanisms, including isolation between sub-tenants within a single client environment.
- Control data egress at the infrastructure level, allowing only authorized outbound connections as declared by the client.
- Manage hybrid deployments in client-hosted environments, enabling outbound-only connections to the control plane for software releases and health monitoring without transferring client data.
- Define and uphold the shared-responsibility model and service level agreements (SLAs) for client-hosted environments.
- Oversee upgrades and releases across multiple environments within supported version windows, preventing configuration drift.
- Establish baseline security and observability practices, including single sign-on (SSO), audit logging, encryption, monitoring, and alerting.
- Produce clear design documentation and runbooks, documenting decisions thoroughly before implementation begins.

Required Qualifications

- Demonstrated experience managing Terraform or Pulumi codebases in production, including the creation of reusable modules and careful handling of state and drift.
- Hands-on expertise running Kubernetes or a comparable orchestration platform across multiple environments.
- Deep knowledge of at least one major cloud provider, with a strong preference for AWS, and an understanding of strategies to avoid vendor lock-in where applicable.
- Proven experience operating PostgreSQL and object storage in production environments, including performing backups, restores, and upgrades.
- Strong understanding of tenant isolation, private networking, egress control, and secrets management, with the ability to implement these securely.
- Experience with continuous integration and continuous deployment (CI/CD) pipelines and managing versioned releases across many environments without configuration drift.
- Excellent written communication skills, capable of producing clear design notes and operational runbooks.

Preferred Qualifications and Additional Experience

- Experience deploying software into customers’ own cloud accounts is highly desirable.
- Background working in regulated environments such as financial services or privacy-sensitive sectors, or familiarity with SOC 2 compliance readiness, is a plus.
- Experience with additional cloud providers like Google Cloud Platform (GCP) or Microsoft Azure is advantageous.
- Familiarity with GitOps practices and policy-as-code frameworks is beneficial.
- Experience operating platforms that support AI or large language model (LLM) workloads is considered a strong asset.

This position offers the opportunity to work on cutting-edge cloud infrastructure projects with a focus on security, scalability, and operational excellence across diverse client environments.