AWS CloudOps Engineer – GenAI, Linux

This is a fully remote position, open to applicants in Bulgaria.

📋 Description

• Design, implement, and oversee AWS infrastructure that supports production financial workloads.

• Develop Terraform-driven infrastructure for Aurora PostgreSQL, including networking, parameter and secrets management, AWS DMS replication infrastructure, and non-production migration setups.

• Manage infrastructure across various AWS accounts and environments, ensuring compliance with guardrails and account-level standards.

• Create and enhance CI/CD pipelines that incorporate release quality gates, automated schema drift detection, environment parity checks, and evidence capture.

• Construct and maintain QA, UAT, and staging environments that are refreshed from production.

• Oversee Amazon Linux 2023 and RHEL-based systems, handling tasks such as patching, hardening, performance optimization, log management, and troubleshooting.

• Administer Apache HTTP Server, system services, EBS/EFS storage, filesystem permissions, and automated deployment workflows.

• Write and maintain Bash automation scripts, monitoring solutions, deployment processes, and operational scripts.

• Implement host-level security measures including SSH hardening, firewall configurations, least-privilege access, log forwarding, and vulnerability remediation.

• Establish monitoring, alerting, logging, and observability systems using CloudWatch, dashboards, metrics, alarms, and log aggregation.

• Engage in incident response activities, including triage, diagnosis, mitigation, communication, and post-incident follow-up.

• Ensure operational readiness for new services with runbooks, dashboards, and alerting prior to go-live.

• Utilize approved AI-assisted engineering tools, such as Amazon Bedrock, Anthropic Claude models, and Kiro, for operations, documentation, code reviews, and troubleshooting.

• Assess AI tools for infrastructure operations, anomaly detection, documentation generation, and incident support while monitoring usage and costs.

• Implement AWS cost optimization strategies and maintain QuickSight dashboards for billing analytics, cost allocation, usage trends, and financial reporting.

• Assist with FinOps activities, including spend reviews, rightsizing, Savings Plans, Reserved Instance analysis, waste reduction, tagging, and cost allocation.

• Contribute to the rearchitecting of monolithic applications into modern AWS-native architectures.

• Support Docker, ECS, and Fargate containerization, event-driven patterns utilizing SQS, SNS, and EventBridge, as well as blue/green or canary deployments.

• Enhance application reliability, scalability, observability, and operational maintainability.

• Create technical documentation, architecture decisions, runbooks, migration plans, configuration records, and operational procedures.

• Assist with ISO 27001 audit activities and change management processes, applying principles of least-privilege, secure-by-design, and auditability.

⛳️ Requirements

• A minimum of 4 years of experience in DevOps, SRE, Cloud Engineering, CloudOps, or Infrastructure Engineering, with at least 3 years of hands-on AWS expertise.

• Practical experience with EC2, ECS/Fargate, S3, VPC, IAM, Lambda, CloudWatch, and Secrets Manager.

• Proficient in Terraform, CloudFormation, or AWS CDK, with infrastructure managed as code in version control.

• Experience in building and maintaining deployment pipelines using GitLab CI, GitHub Actions, AWS CodePipeline, or equivalent tools.

• Advanced Linux administration skills, ideally with Amazon Linux and RHEL-based distributions.

• Strong Bash scripting and automation capabilities.

• Hands-on experience with VPCs, routing, subnets, security groups, NACLs, VPNs, and Transit Gateway.

• Comprehensive understanding of IAM, encryption, secrets management, patching, access control, and least-privilege design.

• Interest or experience in AI-assisted engineering, including Amazon Bedrock, Kiro LLMs, prompt engineering, or AI-supported workflows.

• Working knowledge of managed databases as a consumer, including provisioning RDS or Aurora instances, parameter groups, monitoring, connectivity, and secrets management.

• Experience in supporting a migration or modernization initiative from the platform perspective.

• Familiarity with constructing release gates and ensuring environment parity in pipelines.

• Capability to produce clear, complete, and audit-ready technical documentation.

• Excellent written and verbal communication skills in English.

• Desirable: experience in regulated financial services, payments, banking, or similar environments.

• Desirable: exposure to ISO 27001, SOC 2, PCI DSS, or other audit and compliance frameworks.

• Desirable: AWS Solutions Architect Professional, AWS DevOps Engineer Professional, or equivalent certification.

• Desirable: experience with Direct Connect, Transit Gateway, Site-to-Site VPN, IPAM, and multi-account networking.

• Desirable: knowledge of AWS cost optimization, CUR analysis, QuickSight billing dashboards, Savings Plans, Reserved Instances, and tagging strategies.

• Desirable: experience with Docker, ECS task definitions, Fargate, service discovery, and service mesh concepts.

• Desirable: familiarity with Amazon Bedrock, Kiro, SageMaker, Claude models, AI-assisted development, or AI-enabled operational automation.

• Desirable: experience with AWS DMS operations from the platform perspective.

• Desirable: knowledge of .NET or Linux containers, including container memory and GC limits, and PHP worker tiers.

• Desirable: experience with log aggregation, distributed tracing, SLOs, dashboards, and incident response workflows.

• Desirable: proficiency in Python or another scripting language in addition to Bash.

• Desirable: knowledge of CloudFront, WAF, Shield, and Route 53.

🏝️ Benefits

• Flexible Working Policy that allows for a mix of remote and office work.

• Multisport Cards.

• 22 Annual Leave Days for all employees, with additional days based on length of service.

• Lifework days: ½ day each quarter to complete personal tasks.

• Flexible hours enabling you to work your 40 hours over 4.5 days.

• Additional Health Insurance covering dental and vision care.

• Team Building Activities & Parties.

• Life Insurance.

• Refer a Friend Bonus.

• Discounts at various stores, theaters, and restaurants.

• Employee CSR Programme, CluneTech Cares, offering one paid Volunteer Day per year.

• CluneTech Life – a corporate wellness initiative.

• Monthly Food Vouchers.

• Company-sponsored Trainings & Learning Accounts.

• #OneTeam Awards and Annual Employee of the Year Awards.

• Milestone Recognition Program.

• Free Sports activities: Football, Tennis, Volleyball.

• Employee Assistance Program.

• Meeting-Free Days.