Cloud Engineer

Brooksource is searching for a Cloud Engineer to join our enterprise financial services partner in Charlotte, NC. This position is based on a hybrid work schedule, with 3 days per week spent in the office in uptown Charlotte. This position is structured as a 12-month Contract to Hire opportunity. In this role, the successful candidate will help drive the design, engineering, and deployment of foundational AWS/Azure cloud platform services for a large-scale, highly regulated financial services environment. This role is a strategic hands-on position, responsible for core services such as compute, storage, network, edge, load balancer, and enabling the platform for enterprise-wide adoption. This Cloud Engineer will architect, engineer, and operationalize AWS Landing Zones, Azure Landing Zones, automate infrastructure deployments, building a robust, scalable, and secure cloud platform foundation. This work will shape DevOps, CI/CD practices, Terraform-driven automation, observability strategies, and Site Reliability Engineering (SRE) practices for the company’s cloud transformation journey. RESPONSIBILITIES: • Architect and own the design and delivery of the core AWS/Azure foundational services, including VPCs, networking, compute, storage, edge services, DNS, firewalls, load balancing, and more. • Define and operationalize enterprise-grade Landing Zones and multi-environment strategies to support regulated workloads. • Establish modularized deployment patterns using Infrastructure-as-Code (Terraform) and CI/CD pipelines for efficient, scalable environment provisioning. Drive the adoption of DevSecOps and GitOps standard methodologies, integrating cloud automation into software delivery lifecycles. • Build and scale Observability frameworks: monitoring, alerting, logging, tracing, and SLO/SLA management in alignment with SRE principles. • Champion SRE operational models to ensure platform resiliency, scalability, and security, while promoting operational excellence. • Collaborate with security, networking, application, and data teams to create highly available and performant cloud platforms that are within compliance. • Provide technical leadership, mentoring, and hands-on support to cloud engineering teams and architects. • Drive innovation by staying ahead of AWS/Azure service developments, industry trends, and emerging cloud technologies. • Contribute to governance processes, including guardrails, compliance, operational controls, and cloud policies for the enterprise. • Lead technical diagnosis and solving and post-mortem reviews for platform incidents, continuously improving the resilience of the platform. REQUIRED SKILLS: • 3+ years of IT infrastructure and/or platform engineering experience focused on AWS/Azure. • Expert in AWS IAM, AWS Organizations, SCP, RCP, and platform controls • Experience with cloud networking and security including transit gateways, hybrid connectivity (VPN, Direct Connect), security groups, NACLs, and firewall policies. • Deep hands-on experience with AWS/Azure core services (EC2, EBS, S3, VPC, Direct Connect, Route53, ELB, CloudFront, WAF, or similar). • Expertise designing and delivering multi-account architectures/Landing Zones. Utilizing concepts such as Account vending, Control Tower, or similar. • Proven expertise in Terraform Infrastructure-as-Code, or cloud-native automation patterns. • Strong background in CI/CD tooling (GitLab, Jenkins, CodePipeline, or similar.) and DevOps practices. • Strong knowledge of observability tooling (CloudWatch, Dynatrace, Grafana, Splunk, or similar.) and SRE methodologies. • Proficiency in Python boto3 library and AWS SDK programming for automating cloud resource management, infrastructure provisioning, and operational tasks across AWS services. • Experience with backup and data protection strategies in cloud environments, including automated backup policies and cross-region replication. • Demonstrated ability to create and maintain technical documentation including architecture diagrams, runbooks, and standard operating procedures for enterprise audiences. • Exceptional communication and customer management skills with the ability to influence executives, engineers, and business leaders. • Strong solution design skills and a mentality of continuous improvement and operational excellence. PREFERRED QUALIFICATIONS: • AWS Professional Certifications: AWS Certified Solutions Architect - Professional, AWS Certified DevOps Engineer. • Experience with ServiceNow, Secrets Management, and Privileged Access Management solutions. • Knowledge of containerized platforms (EKS, ECS, Kubernetes) and serverless services (Lambda, Step Functions). • Familiarity with regulatory frameworks and security standards applicable to financial institutions. • Demonstrated success operating in a large, regulated enterprise, ideally financial services, with deep understanding of compliance and governance requirements (e.g., PCI-DSS, SOX, FFIEC). Eight Eleven Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, national origin, age, sex, citizenship, disability, genetic information, gender, sexual orientation, gender identity, marital status, amnesty or status as a covered veteran in accordance with applicable federal, state, and local laws.