Cloud Engineer @ Ework Group

Popis pozice

O pozici / o projektu

Původní popisek. For our client, one of the Global Pharmaceutical Company, we realize a recruitment process for Cloud Engineer role.

Job Overview

What we are looking for: Senior engineer with 3+ years of cloud engineering experience responsible for designing, building, and operating two complementary internal automation platforms covering multi-cloud VM provisioning (Azure & AWS) and OS golden image build/distribution pipelines. The role operates in a regulated environment with strict compliance and audit requirements across all delivery pipelines.

The Server Platform team designs, builds and operates Server OS across all infrastructure. Many of the line-of-business (LoB) customers that are supported use these services as infrastructure for running critical applications, so it is important that products are high quality and reliable. Examples of the products provided are the "Golden Images and Patching Solution" which provides templates for deploying virtual machines compliant with security requirements and maintaining them. What is being built is a service to manage the full lifecycle of Public Cloud virtual machines from deployment to decommissioning. The Server Platform team also operates the services it builds, so the senior Cloud Engineer role is a DevOps role where operations tasks are shared across the operations team.

Key Responsibilities

Multi-Cloud VM Provisioning

• ▪Design and maintain fully automated, auditable VM provisioning workflows across Azure and AWS in a multi-account environment
• ▪Own end-to-end CI/CD pipelines: from ServiceNow RITM intake to deployed, CMDB-registered VM
• ▪Develop and maintain Python service application handling request transformation, validation, multi-cloud account verification, and CMDB integration
• ▪Author and maintain Terraform configurations for VM provisioning, account initialisation, and management infrastructure
• ▪Maintain cross-account OIDC federation across GitHub Actions, AWS IAM, and Azure Entra ID
• ▪Operate EventBridge → Lambda → GitHub dispatch pipeline for event-driven provisioning automation
• ▪Extend post-processing automation via Ansible (Linux) and PowerShell (Windows): domain join, agent installation, and disk configuration
• ▪Handle ServiceNow incidents and maintain platform reliability across multi-environment deployments.

OS Golden Image Engineering

• ▪Design, build, and harden OS golden images for Azure and AWS across multiple OS families
• ▪Author and maintain Packer templates for simultaneous multi-region image creation (EU, US, China)
• ▪Develop and maintain Windows hardening: TLS configuration, local admin disabling, KMS activation, OpenSSH bootstrap
• ▪Develop and maintain Linux hardening: SSSD/realm domain integration, compliance agent installation (RHEL & Ubuntu)
• ▪Embed and maintain security and compliance agents: Nessus, Splunk Universal Forwarder, FlexNet, Azure Arc
• ▪Maintain Bicep IaC modules for Azure compliance tooling and patching infrastructure
• ▪Execute monthly image patching cycles across all OS variants backed by full audit pipelines

Azure Patching & Compliance Automation

• ▪Design and operate Azure Maintenance Configuration (AMC) workflows for Azure-native and Arc-enabled machines
• ▪Maintain Azure Durable Functions orchestration (fan-out/fan-in) for centralized VM patching across multiple subscriptions
• ▪Operate scheduled and emergency patching across Azure, AWS, and on-premises environments
• ▪Maintain Azure Machine Configuration policies for continuous fleet compliance

Detail pracovní nabídky

• ▪Online nábor
• ▪Ihned
• ▪Práce plně na dálku

O firmě