Job Description Summary

Job Description

Roles and Responsibilities

— Provision & Bootstrap

• Own per-customer AWS account provisioning;

• Automate account bootstrap workflows using Infrastructure as Code (Terraform / AWS CloudFormation) and CI/CD pipelines (GHA / ArgoCD).

• Implement and maintain Cyber Guardrails aligned to GESOS standards, including jumphost configuration, IAM policies, and VPC networking.

• Deploy standardized cloud infrastructure baselines: AWS CloudTrail, CloudWatch, GuardDuty, Security Hub, and Config Rules.

• Configure DNS, network connectivity, and cross-account trust relationships for each customer environment.

— Deploy, Scale & Validate

• Collaborate with Platform SRE to define sizing, scaling, and SLO baselines for each customer workload.

• Support progressive delivery pipelines (blue/green, canary) to ensure zero-downtime deployments.

• Integrate cloud-native observability hooks (CloudWatch, synthetic monitors) for new customer environments.

• Assist with acceptance testing validation gates before production cutover.

— Secure, Operate & Optimize

• Drive FinOps practices: right-size resources, implement savings plans, and produce monthly cost reports per customer using AWS Cost Explorer.

• Maintain cloud security posture: apply CVE patches, respond to compliance and audit requirements in coordination with SecOps.

• Participate in on-call rotations for incident response (Level 1/2), root cause analysis (RCA), and BC/DR exercises.

• Continuously improve account automation, reducing toil through scripting (Python, Bash) and runbook codification.

• Monitor FinOps KPIs and flag anomalies proactively to the SRE Lead.

Required Experience

• 3-5 years of hands-on experience in cloud infrastructure, SRE, or DevOps engineering roles.

• AWS experience using EC2, EKS, S3, VPC, IAM, CloudTrail, Cloud Watch, Guard Duty, Organizations, Control Tower.

• Experience writing Infrastructure as Code using Terraform or AWS Cloud Formation or any programming languages like Python or Java, etc. 

• Working knowledge of CI/CD pipelines — GitHub Actions (GHA) and/or ArgoCD.

• Scripting fluency in Python and/or Bash for automation and operational tooling.

• Knowledge and awareness with cloud security best practices: IAM least privilege, security group design, encryption at rest/in-

• transit.

• Exposure to FinOps concepts — cost allocation tagging, savings plans, Reserved Instances analysis.

• Fluent in English.

Nice to Have

• Familiarity with Cyber Security Standard and Policies in regulated environments.

• Knowledge of GovCloud or regulated-industry compliance (FedRAMP, NERC CIP, SOC 2).

• AWS certifications: Solutions Architect (Associate or Professional), DevOps Engineer Professional.

Education Qualification

Bachelor's degree in computer science

Business Acumen:

• Strong oral and written communication skills

• Strong business analysis and problem solving skills

• Proactively engages with cross-functional teams to resolve issues and design solutions using critical thinking and analytical skills and best practices

• Ability to interact at all levels of the organization and with other GE businesses

Additional Information