[Hiring] Infrastructure Cloud Engineer @Creative Chaos

Role Description

Creative Chaos is seeking a hands-on Cloud Engineer to design, automate, secure, and operate cloud workloads across Azure and AWS. This role owns core platform components including:

• Infrastructure as code (Terraform)
• Kubernetes (AKS/EKS)
• Secure networking
• CI/CD enablement
• Observability
• FinOps

You will work closely with DevOps, software, and web engineering teams to deliver resilient, scalable, and compliant cloud platforms. The ideal candidate is strong in:

• Multi-cloud architecture
• Kubernetes operations
• Identity and access management
• Security guardrails
• Automation
• Platform reliability

Bringing a pragmatic, automation-first mindset to cloud engineering.

Qualifications

• Bachelors in IT, CS or related field
• Minimum 5 years of related experience
• Hands-on production experience in both Azure and AWS
• Deep expertise in Terraform (modules, workspaces, state, policy as code)
• Strong Kubernetes operational experience (AKS/EKS), including Helm, ingress controllers, ACR/ECR
• Solid networking fundamentals: VNet/VPC, routing, VPNs, Private Link/Endpoints, ExpressRoute/Direct Connect, load balancers, WAF, DNS
• Strong identity & access management skills: Entra ID and AWS IAM, SSO/OIDC, secrets management (Key Vault/KMS)
• CI/CD implementation experience with GitHub Actions, Azure DevOps, or Jenkins; security gates and artefact repositories
• Observability/SRE experience across metrics, logs, tracing, alerting, incident response, and post-mortems
• Strong scripting abilities (PowerShell, Bash) and OS-level expertise across Linux/Windows
• Experience with DR patterns (IaC rebuilds), HA architectures, RTO/RPO planning

Requirements

• Onboard logs/telemetry and integrate data sources with the SIEM
• Implement and maintain security guardrails using Azure Policy, AWS Config, Defender for Cloud, Security Hub, GuardDuty, and WAF policies
• Enforce least-privilege access across Entra ID (PIM, managed identities) and AWS IAM/Identity Center, including workload identity federation for CI/CD
• Manage change control and audit processes through IaC-first workflows, along with runbooks and architectural decision records
• Maintain patch and version hygiene for Kubernetes, node OS/AMIs, container images, and managed services, including automated drift detection
• Lead incident investigations across Azure/AWS, perform RCA, and implement preventative controls (policies, guardrails, pipeline checks)
• Provide architectural input on security, reliability, networking, and cost during design reviews

Desirable Skills

• M365 Conditional Access (global policies, break-glass, step-up)
• AWS landing zone tooling (Control Tower, IAM Identity Center, account vending/guardrails)
• Ability to read/maintain CloudFormation or Bicep where Terraform is primary
• Web hosting experience: CDN/WAF (Front Door/CloudFront), TLS/PKI, caching, performance tuning
• Data fundamentals: S3/Blob lifecycle, RDS/Aurora/SQL MI/Postgres, Redis/ElastiCache/Azure Cache
• Kubernetes and supply-chain security: admission controls, image signing, SBOM

Certifications (Preferred)

• Azure: AZ-104, AZ-305, AZ-500 (AZ-700/AZ-400 are a bonus)
• AWS: Solutions Architect – Associate; SA-Pro or DevOps Pro preferred; Security or Advanced Networking is a plus
• Kubernetes/HashiCorp: CKA, Terraform Associate (CKS is a plus)
• FinOps: FinOps Certified Practitioner (bonus)