Your Job The Senior Cloud Engineer at KBX is a high-impact individual contributor who designs, builds, and operates a modern AWS-first cloud platform that enables application teams to deliver products securely and efficiently. This senior-level role combines hands-on engineering with ownership across cloud infrastructure, advanced networking, Amazon EKS/Kubernetes, service mesh, automation, security, reliability, and cost optimization. Senior engineers help shape the platform strategy, establish engineering standards, lead the resolution of complex technical challenges, and influence cloud decisions for the organization.
What You Will Do- Design and evolve secure, scalable, highly available AWS infrastructure and multi-account platform solutions in alignment with enterprise security, compliance, reliability, and business requirements.
- Lead the technical direction and lifecycle strategy of our cloud platform including the Kubernetes-based platform (Amazon EKS) and shared services, Istio, Amazon MSK/Kafka, and Redis/ElastiCache.
- Build and govern Infrastructure as Code and GitOps practices using Terraform, Argo CD, Helm, and GitHub Actions to enable consistent, automated provisioning, testing, configuration, and deployment.
- Assist in defining platform standards, reusable capabilities, and operational controls that enable application teams to adopt cloud and AI technologies securely, reliably, and at scale.
- Design and implement cloud security guardrails, including IAM, , network policies, encryption, and secrets management, while proactively remediating vulnerabilities based on risk.
- Contribute to observability practices across logging, metrics, and tracing; use platform data to improve operational health.
- Lead incident response and root-cause analysis for complex cloud and platform issues, driving durable improvements that reduce recurrence.
- Partner with Software and Engineering, DevOps, Security, and IT leadership teams to translate requirements into platform solutions, accelerate onboarding, and remove infrastructure barriers to delivery.
- Implement FinOps practices for cost allocation, tagging, budgeting, forecasting, and reporting; guide teams in balancing cost, performance, reliability, risk, and business value.
- Provide hands-on technical leadership by producing high-quality infrastructure code, conducting architecture and code reviews, and modeling engineering best practices for security, reliability, and maintainability.
- Mentor junior and mid-level engineers, raise technical standards, and influence cloud and platform architecture decisions across teams without relying on direct authority.
- Evaluate emerging cloud technologies and strategic trade-offs, leading the adoption of tools, frameworks, and processes that support immediate needs and long-term platform strategy.
Who You Are (Basic Qualifications)- Experience designing, implementing, and supporting production AWS environments that use multiple accounts, VPCs, compute, storage, IAM roles, and network services.
- Experience designing and troubleshooting AWS network connectivity and security using VPCs, subnets, route tables, security groups, PrivateLink, VPNs, or comparable services at enterprise scale
- Experience deploying and operating production container workloads on Amazon EKS or ECS, including container networking and ingress configuration
- Experience building and maintaining reusable cloud infrastructure with Terraform and automating deployments or operational workflows through GitHub Actions or another CI/CD platform.
- Experience creating/maintaining automation using either Python or shell scripts
- Experience applying cloud security and reliability practices(including IAM, encryption, secrets management, monitoring, logging, high availability, incident response, and root-cause analysis)
- Experience making recommendations and solutioning for the companies cloud strategy
What Will Put You Ahead- Experience supporting an internal cloud or developer platform used by multiple application teams.
- Experience implementing or operating a service mesh, such as Istio, and an API gateway, such as Gloo, kgateway, Kong, or a comparable technology, in a production environment.
- Experience using GitOps practices and a tool such as Argo CD to deploy and manage workloads on Kubernetes.
- Experience configuring Cloudflare or a comparable CDN, DNS, or web security platform for traffic management and application protection.
- Experience integrating on-premises systems with AWS resources in a hybrid or multi-cloud environment, including network connectivity or identity federation.
- AWS Certified Solutions Architect - Associate (or higher).
- Certified Kubernetes Administrator (CKA) or similar Kubernetes certification.
At Koch companies, we are entrepreneurs. This means we openly challenge the status quo, find new ways to create value and get rewarded for our individual contributions. Any compensation range provided for a role is an estimate determined by available market data. The actual amount may be higher or lower than the range provided considering each candidate's knowledge, skills, abilities, and geographic location. If you have questions, please speak to your recruiter about the flexibility and detail of our compensation philosophy.
Hiring Philosophy All Koch companies value diversity of thought, perspectives, aptitudes, experiences, and backgrounds. We are Military Ready and Second Chance employers. Learn more about our hiring philosophy here .
Our Benefits Our goal is for each employee, and their families, to live fulfilling and healthy lives. We provide essential resources and support to build and maintain physical, financial, and emotional strength - focusing on overall wellbeing so you can focus on what matters most. Our benefits plan includes - medical, dental, vision, flexible spending and health savings accounts, life insurance, ADD, disability, retirement, paid vacation/time off, educational assistance, and may also include infertility assistance, paid parental leave and adoption assistance. Specific eligibility criteria is set by the applicable Summary Plan Description, policy or guideline and benefits may vary by geographic region. If you have questions on what benefits apply to you, please speak to your recruiter.
Additionally, everyone has individual work and personal needs. We seek to enable the best work environment that helps you and the business work together to produce superior results.
