Engineer III

Cloud, Infrastructure, and Networking 

• Manage and secure highly available, scalable, and cost-efficient AWS platforms. 

• Design and govern VPCs, subnets, routing, Transit Gateway, VPC endpoints, DNS, VPN, Direct Connect, and hybrid connectivity. 

• Design firewall and traffic-control solutions using AWS Network Firewall, security groups, network ACLs, and related technologies. 

• Build reusable Terraform modules and automated provisioning workflows for multi-account and multi-environment deployments. 

• Establish standards for Terraform state management, testing, code review, drift detection, policy enforcement, and controlled changes. 

• Architect and operate enterprise CI/CD platforms using Jenkins, GitHub Actions, and related tools. 

• Automate Jenkins jobs, shared libraries, pipeline templates, build workflows, release gates, and deployment processes. 

• Automate software packaging, validation, artifact publishing, promotion, and deployment. 

• Build, maintain, and troubleshoot Linux software packages, with particular emphasis on Debian-based package formats and distributions. 

• Develop and maintain package bundling, installation, upgrade, rollback, dependency management, and software distribution workflows. 

• Use configuration management and infrastructure automation tools such as Ansible, Chef, or Puppet to automate system configuration, software installation, and environment management. 

• Use Git and CI/CD tools to build, test, validate, package, and release software reliably. 

• Lead Linux platform engineering across on-premise and cloud environments, with strong hands-on experience in Debian and Debian-derived distributions such as Ubuntu. 

• Apply strong knowledge of Linux internals, system services, process management, permissions, networking, storage, file systems, package management, and dependency management. 

• Define containerization and orchestration strategies using Docker, Kubernetes, and Amazon EKS. 

• Improve reliability through observability, monitoring, alerting, capacity planning, resilience engineering, and automation. 

• Establish security standards for IAM, encryption, secrets management, vulnerability management, logging, compliance, and least privilege. 

• Mentor engineers through coaching, documentation, design reviews, and knowledge sharing.