cloud engineers #2

Cloud Engineer We are seeking experienced Cloud Engineers to support BNY Mellon's cloud transformation initiatives. These roles are hands-on engineering positions focused on infrastructure automation, cloud security posture, and scalable platform design—NOT application development or support.

Experience: 5–10 years (7+ preferred) Primary Platform: Azure Secondary Exposure: GCP (near-term investment), AWS (optional)

Key Technologies:

Infrastructure as Code: Terraform Enterprise (critical)

Programming: Python (must-have), Java (optional)

Containers: Docker, Kubernetes (AKS preferred)

Security: Azure AD/IAM, AWS IAM fundamentals

Serverless (nice-to-have): Azure Functions, AWS Lambda

Core Capabilities & Responsibilities:

Azure Platform Engineering

Design/manage VNets, subnets, NSGs, Azure Firewall, VPN Gateway/ExpressRoute

Deploy/update resources using Terraform

Configure Azure AD service principals, RBAC, managed identities

GCP & AWS Exposure (Secondary)

GCP: VPC networks, firewall rules, IAM roles, Compute Engine & GKE via Deployment Manager or Terraform

AWS: VPCs, IAM roles/policies, Auto Scaling, CloudFormation or Terraform

Infrastructure as Code

Author modular Terraform Enterprise configurations

Use remote state and workspace management

Programming & Automation

Develop automation scripts and cloud-native tooling in Python

Implement robust error handling and integration with cloud services

Containers & Kubernetes

Build/publish Docker images to ACR/ECR/GCR

Deploy/manage Kubernetes workloads (AKS/GKE), Helm charts, rolling updates

Cloud Security Integration

Azure AD: RBAC, service principals, conditional access

AWS IAM: least-privilege policies, cross-account roles, SAML/OIDC federation

Serverless (Desirable)

Build event-driven functions

Integrate with storage/messaging services

Manage function versions and durable workflows

Manager Insights & Priorities

Focus is on hands-on cloud engineering—not development or support.

Terraform and Python are critical skills.

Immediate impact is on Azure; GCP is small; They are purchasing AWS next year

Engineers must be customer-facing: gather requirements, troubleshoot, design, and build.

Candidates should be able to rationalize cloud security postures and contribute to foundational engineering.

Strong preference for solid cloud engineers with infrastructure automation experience.