Senior Cloud Engineer
TLDR
Architect and manage enterprise-scale cloud infrastructure solutions across Azure and AWS, mentoring engineers and optimizing performance and security across platforms.
WHO WE ARE
Headquartered in Nashville, Tennessee, Ncontracts leads the industry in integrated risk management and compliance solutions, serving over 5,000 financial institutions nationwide. As a seven-time Inc. 5000 Fastest Growing Companies honoree and consistent year-over-year recipient of "Best Places to Work" awards, we offer a thriving, work environment where career growth and life-work balance go hand in hand.
At Ncontracts, you'll join a team of industry experts dedicated to strengthening the financial services sector through innovation and thought leadership. We're seeking creative, collaborative, and self-driven professionals across all areas of our business - from developing cutting-edge solutions to sales, marketing, customer support, and beyond. Join us in our mission to make the financial industry stronger and more resilient, while advancing your career in a supportive, dynamic environment that values your unique skills and perspectives.
THE ROLE
We are currently seeking a Senior Cloud Engineer to join our growing team! The Senior Cloud Engineer reports to the Director of Platform Engineering and is responsible for architecting and managing enterprise-scale cloud infrastructure solutions across both Azure and AWS with strong proficiency in both platforms.
The primary role of the Senior Cloud Engineer is to design and implement mission-critical infrastructure, establish organizational standards, and mentor junior and mid-level engineers. You will make complex architectural decisions in both Azure and AWS, ensuring our infrastructure supports scalability, reliability, and performance optimization.
You will architect solutions using infrastructure-as-code (Terraform, Azure Bicep, ARM Templates, AWS CloudFormation) and implement enterprise-scale CI/CD pipelines using Azure DevOps, GitHub Actions, and AWS CodePipeline. You will provision and maintain AI service infrastructure, ensuring high availability of model endpoints while implementing gateways, monitoring, and cost attribution workflows. Your work includes designing containerized platforms using AKS and EKS, implementing comprehensive observability using Dynatrace, and managing message queuing systems for event-driven architectures.
In this role, you will implement security best practices across both platforms including IAM, secrets management, and compliance frameworks. You will perform performance tuning, lead incident response efforts, and optimize cloud spending through FinOps practices. You will mentor L1-L3 engineers, contribute to infrastructure standards and runbooks, and collaborate with development teams to ensure infrastructure supports application requirements. You work with both Azure and AWS platforms daily to support mission-critical production workloads.
[This position shares an on-call rotation with other teammates. The position is restricted to North America. Normal working hours are Monday through Friday, 8:00AM – 5:00PM, however evening and weekend work may occur.]
YOU WILL
Design and implement cloud infrastructure solutions across Azure and AWS, focusing on scalability, reliability, and performance optimization
Build and maintain CI/CD pipelines using Azure DevOps, GitHub Actions, and AWS CodePipeline with automated testing and deployment strategies
Implement and optimize containerized applications using Azure Kubernetes Service (AKS), AWS Elastic Kubernetes Service (EKS), and container orchestration with Docker and Kubernetes
Develop infrastructure-as-code solutions using Terraform, Azure Bicep, ARM Templates, and AWS CloudFormation with emphasis on modularity and reusability
Implement comprehensive observability solutions using Azure Monitor, AWS CloudWatch, Dynatrace, or similar tools, creating dashboards, alerts, and monitoring best practices
Provision and maintain AI service infrastructure, ensuring high availability of model endpoints, implementing fallbacks and guardrails, deploying central AI platform components (proxies, gateways, monitoring), and managing observability, logs, and cost attribution workflows
Design and manage message queuing systems for event-driven architectures using RabbitMQ, Kafka, Azure Service Bus, AWS SQS/SNS, and third-party solutions
Optimize cloud storage solutions across platforms: Azure (Blob Storage, Files, Data Lake Storage) and AWS (S3, EBS, EFS)
Implement security best practices across both platforms including: IAM policies and role-based access control (Azure RBAC, AWS IAM), Secrets management (Azure Key Vault, AWS Secrets Manager), Certificate lifecycle management (Azure Key Vault, AWS Certificate Manager), Network security (Azure NSG/Firewall, AWS Security Groups/Network Firewall)
Perform performance tuning and scalability optimization for applications, including load testing and capacity planning
Conduct incident response, root cause analysis, and implement improvements to prevent recurrence
Collaborate with development teams to ensure infrastructure supports application requirements and deployment needs
Mentor L1, L2, and L3 engineers on cloud technologies, DevOps practices, and troubleshooting techniques
Contribute to infrastructure standards, best practices documentation, and runbook development
Support disaster recovery planning and backup/restore procedures with testing and validation
Monitor and optimize cloud spending through FinOps practices, implementing cost-saving measures across both platforms
Work with both Azure and AWS platforms daily to support mission-critical production workloads
The above statements are intended only to describe the general nature of the job and should not be construed as an all-inclusive list of position responsibilities
YOU BRING (Qualifications)
6+ years of experience in cloud infrastructure, DevOps, or SRE roles with proven technical expertise
Strong proficiency in both Azure and AWS cloud platforms with demonstrated capability to architect and implement solutions in either environment
Professional-level certifications in both platforms: Azure Solutions Architect Expert (AZ-305) - Required, and AWS Certified Solutions Architect - Professional (SAP-C02) - Required
Demonstrated strong proficiency with cloud-native services across both platforms: Compute (Azure VMs/App Service/AKS and AWS EC2/Lambda/EKS), Storage (Azure Blob Storage/Data Lake and AWS S3/Glacier), Networking (Azure VNet/Load Balancer/Application Gateway and AWS VPC/ALB/NLB/API Gateway), Databases (Azure SQL/Cosmos DB/PostgreSQL and AWS RDS/Aurora/DynamoDB), Serverless (Azure Functions/Logic Apps and AWS Lambda/Step Functions), Containers (AKS and EKS)
Expert-level proficiency with infrastructure-as-code tools: Multi-cloud (Terraform - required), Azure (Bicep, ARM Templates), AWS (CloudFormation, AWS CDK)
Experience building and maintaining CI/CD pipelines across platforms (Azure DevOps, GitHub Actions, AWS CodePipeline)
Strong proficiency with observability and monitoring tools: Azure Monitor/Application Insights, AWS CloudWatch/X-Ray, Third-party (Dynatrace, Datadog, Prometheus, Grafana)
Experience implementing message queuing systems (Azure Service Bus, AWS SQS/SNS, RabbitMQ, Kafka)
Working knowledge of cloud storage solutions and data architectures across both platforms
Demonstrated experience with security best practices: Azure AD/Azure RBAC/Azure Key Vault, AWS IAM/AWS Organizations/AWS Secrets Manager, Network security across both platforms
Proven ability to perform performance tuning and scalability optimization for production applications
Strong problem-solving skills with ability to troubleshoot complex distributed systems independently
Excellent communication skills and demonstrated ability to mentor junior and mid-level engineers
Bachelor's degree in Computer Science, Engineering, or equivalent practical experience
BONUS POINTS (Preferred Qualifications)
Additional professional certifications: Azure DevOps Engineer Expert (AZ-400), AWS Certified DevOps Engineer - Professional, Azure Security Engineer Associate, AWS Certified Security - Specialty
Certified Kubernetes Administrator (CKA) and/or Certified Kubernetes Application Developer (CKAD)
Experience architecting complex multi-cloud and hybrid-cloud solutions
Hands-on experience with caching solutions (Azure Redis Cache, AWS ElastiCache)
Experience with database administration and optimization: Azure SQL Database/Cosmos DB/PostgreSQL for Azure, AWS RDS/Aurora/DynamoDB
Experience with distributed search platforms (Azure Cognitive Search, AWS OpenSearch, Elasticsearch)
Experience with data platforms and ETL tools: Azure Data Factory/Azure Synapse Analytics, AWS Glue/AWS Data Pipeline, Snowflake/Databricks
Deep knowledge of microservices architecture and RESTful API design
Experience with deployment automation tools (Octopus Deploy, Spinnaker, ArgoCD)
Experience with automated testing frameworks and quality assurance for infrastructure
Proficiency with version control workflows (Git flow, trunk-based development)
Experience with agile methodologies (Scrum, Kanban) and project management tools
Knowledge of compliance frameworks and security standards (SOC 2, ISO 27001, HIPAA, PCI-DSS)
Understanding of advanced networking: Azure (VNet peering, Private Link, ExpressRoute), AWS (VPC peering, PrivateLink, Direct Connect)
Experience creating technical documentation and knowledge bases
Experience with service mesh technologies (Istio, Linkerd, AWS App Mesh)
Experience with chaos engineering and resilience testing
Contributions to open-source infrastructure or DevOps projects
WE OFFER ALL FULL-TIME TEAM MEMBERS:
A fun, fast-paced work environment
Responsible PTO Plan that meets or exceeds state and local medical and family leave laws
11 paid holidays
Community and social events to keep you connected and engaged
Mental Health Benefits
Medical, Dental and Vision insurance
Company-paid Group Life Insurance, Short- and Long-Term Disability
Flexible Spending Account & Health Savings Account
Aflac Benefits – Critical Illness, Cancer Protection, & Hospital Choice
Pet Insurance
401 (k) with company match with eligibility on Day 1 of employment
2 Paid Volunteer Time Off Days
And much more!
*Part-Time, Temporary, Contractor, and Intern positions are not eligible for company benefits, including paid time off, health insurance, and other employee benefit programs.
AAP/EEO Statement
Ncontracts provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
Other Duties
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
Ncontracts provides integrated risk management and compliance software solutions tailored for financial institutions, fintechs, and mortgage companies across the US. Our platform enables clients to optimize their data and manage their risk efficiently, ensuring profitability and regulatory compliance in an ever-evolving financial landscape.
- Founded
- Founded 2008
- Employees
- 201-500 employees
- Industry
- Capital Markets