Key Responsibilities
1. Architecture & Cloud Transformation
Act as point of contact for multi-cloud, hybrid infrastructure services transformation, establishing architecture standards and golden patterns for provisioning and deployment.
Support cloud-native solutions over legacy lift-and-shift patterns, aligning all designs with the six pillars of the Well-Architected Framework (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability).
Design and implement enterprise cloud architectures, develop cloud landing zones and platform capabilities, design hybrid-cloud and multi-cloud connectivity.
Define and own end-to-end Solution Architecture (Infrastructure, applications, and data technologies) utilizing service-oriented architecture principles.
Assist migration initiatives, including On-Premises-to-Cloud and Cloud-to-Cloud migrations with zero downtime architectures and robust Disaster Recovery (DR) validation.
AI Infrastructure & Workload Support: Support robust, scalable, and secure underlying cloud infrastructure for AI/ML workloads (including GPU-optimized nodes, vector database connectivity, and secure model serving endpoints) across AWS, GCP, and Azure.
AI-Assisted Engineering Productivity: Help the secure adoption of AI-driven developer tooling (e.g., GitHub Copilot, Amazon Q) within infrastructure teams, establishing safety guardrails for automated code and Infrastructure-as-Code generation.
ITIL-Aligned Cloud Engineering/Operations: Bridge modern cloud engineering practices with IT Service Management (ITSM) frameworks (ITIL v4 or above), ensuring rapid deployment velocity is balanced with robust service quality, predictability, and risk control.
2. Governance, Security & Compliance
Design and enforce enterprise Cloud Governance strategies, implementing automated guardrails and continuous compliance using Cloud Custodian and native cloud policies (e.g., AWS SCPs, Azure Policies).
Support comprehensive Cloud Identity and Access Management (IAM), tenant isolation, federated authentication, and least-privilege security models.
Partner with security teams to configure and manage enterprise edge security architectures, integrating Fastly CDN and NFWAF (Next-Gen WAF) to protect core applications from modern web threats.
Ensure end-to-end security and regulatory compliance across all enterprise infrastructure, data pipelines, and application configurations.
AI Governance & Policy-as-Code: Extend Cloud Custodian and native cloud governance engines to audit, monitor, and enforce compliance policies on cloud-hosted AI and generative AI services, preventing unauthorized shadow AI deployments.
AI Security & Data Privacy: Partner with security teams to ensure secure data pipelines, strict API rate-limiting, and egress/ingress protection via Fastly CDN and NFWAF for enterprise AI applications. Implement FinOps guardrails specifically tailored for high-cost AI/ML resource consumption.
3. DevOps, Automation & CI/CD Excellence
Standardize and govern Infrastructure-as-Code using Terraform and Terragrunt for modular, DRY multi-cloud deployments.
Optimization and management of CI/CD pipelines, driving adoption toward GitHub and GitHub Actions while managing legacy Jenkins maintenance.
Develop advanced automation scripts and custom orchestration tools using Python, Bash, and PowerShell.
Ability to support configuration management frameworks and server baseline standards using Ansible, alongside containerized runtime workloads using Docker and Kubernetes.
4. Technical Leadership & Engineering Support
Troubleshoot critical production issues, perform root cause analyses, and drive technical problem-solving across cross-functional engineering squads.
Conducting rigorous code and Pull Request (PR) reviews for Terraform configurations and CI/CD pipelines.
Build and maintain comprehensive internal knowledge bases, technical documentation, and reusable architecture decision records (ADRs).
Articulate technical risks, cost-capacity ratios, and strategic roadmaps clearly to audiences ranging from operations engineers to executive stakeholders.
Internal Platform Development – In-house cloud platform management solutions development - Develop self-service platform capabilities etc.
Candidate Profile & Qualifications
Education & Experience
Bachelor’s Degree in Computer Science, Information Technology or equivalent.
4+ years of total progressive industry experience in IT infrastructure and software delivery.
2+ years of dedicated hands-on cloud engineering, platform design, or operational experience.
Proven track record of hands-on experience across at least one major cloud vendor (AWS, Azure, and/or GCP). Experience in two cloud vendors would be an advantage.
Technical Competencies
Thorough understanding or core cloud foundational services (networking/VPC peering, enterprise IAM, hybrid connectivity, compute, and container runtimes) across AWS, GCP, and Azure, with a proven ability to design and manage resilient, high-performance multi-cloud platforms.
Expertise in Infrastructure-as-Code tooling (Terraform, Terragrunt) and modern CI/CD ecosystems (GitHub Actions, Jenkins).
Strong working knowledge of configuration management and automation frameworks (Python, Bash, PowerShell, Ansible).
Understanding of networking, CDN caching tiers, WAF configurations (i.e. Fastly CDN, NGWAF), and hybrid cloud connectivity.
Experience in implementing/supporting cloud security controls, encryption (at rest and in transit), key management systems, vulnerability assessments, and SIEM integrations.
AI Governance & Cloud Integration: Familiarity with supporting governance, security controls, and resource optimization for cloud-native AI/ML services.
Responsible AI & Compliance: Understanding of data residency, privacy frameworks, and security baselines required when deploying AI models in enterprise multi-cloud environments.
ITSM & ITIL Frameworks: Solid working knowledge of ITIL principles, particularly concerning change enablement, incident management, problem management, and Configuration Management Database (CMDB) tracking in multi-cloud architectures.
Certifications & Soft Skills
Cloud Certifications: Active certification from at least one major cloud provider at the minimum of Associate/Engineer level.
Infrastructure Automation Certifications: Having HashiCorp Certified: Terraform Associate (or higher Authoring and Operations Professional) is an added advantage.
Service Management: Certification in ITIL v4 Foundation or above would be an added advantage.
Communication & Influence: Exceptional written, verbal, and presentation abilities; adept at translating complex architectural trade-offs and risks into business terms for executive leadership.
Benefits
Performance-based annual bonus
Performance rewards and recognition
Agile Benefits - special allowances for Health, Wellness & Academic purposes
Entertainment allowance
Team engagement allowance
Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws
Hybrid work arrangement
Sysco LABS is an Equal Opportunity Employer.
