Senior Cloud Engineer

About the Position

We are seeking a Senior Cloud Engineer to design, build, and maintain scalable, secure, and highly available cloud infrastructure supporting mission-critical applications within a banking environment. This role plays a central part in the strategic migration from on-premises and PCF (Pivotal Cloud Foundry) platforms to AWS - leading container orchestration, infrastructure-as-code adoption, and modern DevOps practices. You will combine deep hands-on AWS engineering expertise with architectural thinking, security awareness, and cost discipline, while providing technical leadership and mentorship to engineering teams across the platform.

Responsibilities

• Design, provision, and manage secure, scalable AWS infrastructure across core services-including EKS, ECS, EC2, VPC, IAM, S3, and RDS-ensuring high availability, fault tolerance, and performance for critical workloads.
• Automate infrastructure provisioning via Terraform, maintaining repeatable, version-controlled, peer-reviewed environments aligned with enterprise standards.
• Maintain comprehensive architecture documentation, runbooks, and operational procedures to ensure platform supportability across teams.
• Lead PCF-to-AWS migration activities by assessing workloads, defining migration strategies, and containerizing applications with Docker for deployment on Kubernetes (EKS) or ECS.
• Design and implement container orchestration patterns supporting microservices deployments, rolling updates, blue-green and canary releases, and horizontal scaling.
• Collaborate with application teams to ensure workloads are cloud-ready by addressing dependencies, configuration, secrets management, and environment parity across development stages.
• Build, maintain, and enhance CI/CD pipelines for automated build, test, security scanning, and deployment using GitLab CI, Jenkins, GitHub Actions, or similar tools.
• Integrate security and quality gates within pipelines-including SAST, DAST, dependency and container image scanning, and compliance checks-to embed shift-left security practices.
• Support engineering teams in adopting modern DevOps and GitOps practices, promoting infrastructure-as-code, automated testing, and continuous delivery.
• Manage cloud networking components such as VPCs, subnets, routing tables, security groups, NACLs, load balancers (ALB/NLB), and DNS to ensure secure, segmented architectures meeting banking-grade requirements.
• Implement and enforce cloud security best practices, including encryption, secrets management, least-privilege IAM policies, and identity federation.
• Ensure infrastructure compliance with organizational security policies and applicable financial services regulatory standards.
• Establish comprehensive monitoring, logging, metrics, and alerting across cloud environments to provide full observability of infrastructure health, application performance, and security events.
• Respond to infrastructure incidents, conduct root cause analyses, and drive remediation to maintain service availability and resilience.
• Optimize cloud resources through right-sizing, capacity planning, autoscaling policies, resource tagging, and governance practices to maximize platform value without unnecessary expenditure.

Requirements

• AWS: Extensive experience in AWS environments. AWS certifications at the Solutions Architect Associate or Professional level, or DevOps Engineer Professional level, with a preference for advanced certifications.
• Docker: Proficient management of containerized applications using Docker and Kubernetes (EKS), encompassing cluster operations, networking, Helm charts, and deployment methodologies.
• Kubernetes: Proficient management of containerized applications using Docker and Kubernetes (EKS), encompassing cluster operations, networking, Helm charts, and deployment methodologies.
• Terraform: Expertise in Terraform for infrastructure-as-code, including module creation, state handling, remote backend configuration, and integration with CI/CD pipelines.
• VPC: Solid understanding of networking principles such as VPC design, subnetting, routing, security group policies, load balancing (ALB/NLB), DNS management (Route 53), and network troubleshooting.
• IAM: In-depth knowledge of cloud security practices and IAM, covering policy development, enforcing least-privilege access, encryption techniques, secrets management, identity federation, and security monitoring.
• CI/CD: Experience in developing and maintaining CI/CD pipelines using platforms like GitLab CI, Jenkins, or GitHub Actions, incorporating security and quality controls.
• Python: Scripting skills in Python, Bash, or Go for automation, tooling, and operational tasks.
• Bash: Scripting skills in Python, Bash, or Go for automation, tooling, and operational tasks.
• Go: Scripting skills in Python, Bash, or Go for automation, tooling, and operational tasks.
• Linux: Strong Linux administration capabilities, with competence in operating and troubleshooting Linux production systems.

Soft Skills

• Effective communication, enabling clear articulation of infrastructure decisions and trade-offs to development teams, security personnel, and leadership stakeholders.

We Offer

• Competitive salary
• Opportunity to work in a dynamic and innovative environment
• Professional growth and development opportunities

About the Company

DXC Luxoft is a leading global provider of digital transformation and technology services, empowering businesses to thrive in the digital era. We are committed to delivering excellence and innovation to our clients, leveraging cutting-edge technologies and industry expertise.