AWS Cloud Developer

Experience: 8 - 12 Years

Location: Bangalore / Hyderabad

Job Summary

NexGen Solutions is looking for a Principal Cloud Engineer to lead our AWS platform engineering practice. You will own the design, build and governance of our multi-account AWS platform serving 20+ enterprise clients. This is a technical leadership role — you will set architecture standards, lead a team of 5–8 cloud engineers, drive IaC and DevSecOps maturity, and directly engage with client CTO and architecture teams. You must have deep hands-on AWS expertise across compute, networking, security, automation and cost management — combined with the ability to mentor and lead a high-performing engineering team.

Key Responsibilities

Lead the design and implementation of multi-account AWS Organization architectures — Control Tower, Service Catalog, account vending and governance guardrails

Own the AWS CloudFormation and Terraform IaC library — build reusable modules, enforce standards and drive adoption across all client environments

Define and implement DevSecOps pipelines — integrating security scanning, compliance checks and automated remediation into CI/CD workflows

Lead cloud security posture management — Security Hub, GuardDuty, Inspector, Macie, Config rules and automated remediation

Drive cloud cost optimisation programme — rightsizing, Reserved Instance planning, Savings Plans and FinOps reporting across 20+ client accounts.

Mentor and technically lead a team of 5–8 cloud engineers — conduct code reviews, architecture reviews and technical growth planning

Engage directly with client CTO, VP Engineering and architecture teams — presenting cloud strategy, roadmaps and Well-Architected review outcomes

Establish and enforce platform engineering standards — IaC code quality, security baselines, tagging strategies and operational runbooks

Lead incident response for P0 and P1 cloud platform issues — root cause analysis, post-mortems and preventive action plans

Evaluate and recommend new AWS services and cloud-native tools for adoption across the practice

Qualifications

8–12 years of hands-on cloud infrastructure and platform engineering experience — minimum 5 years specifically on AWS in production enterprise environments

Expert-level AWS skills — multi-account Organizations, Control Tower, CloudFormation StackSets, advanced VPC networking, transit gateway, AWS Direct Connect and PrivateLink

Deep Terraform expertise — enterprise module library design, state management, workspace strategy, Sentinel policy-as-code

Strong Python engineering skills — boto3 automation frameworks, Lambda functions, FastAPI, pytest — production-grade code not scripting level

Advanced Kubernetes — EKS cluster management, Helm charts, ArgoCD GitOps, Karpenter autoscaling, cluster security hardening

Cloud security expertise — IAM permission boundaries, SCPs, KMS, Secrets Manager, CSPM, zero-trust network design, penetration testing remediation

Advanced monitoring and observability — CloudWatch cross-account dashboards, Prometheus, Grafana, Datadog, distributed tracing with AWS X-Ray

FinOps — cost allocation tagging, rightsizing analysis, RI/SP strategy, chargeback models, monthly cost reporting for CXO stakeholders

Team leadership experience — minimum 2 years leading a cloud engineering team of 4 or more engineers

Client-facing experience — presenting to CTO or VP-level stakeholders, running architecture workshops and delivering technical proposals

Preferred Qualifications

AWS Certified Solutions Architect – Professional (SAP-C02) — mandatory, must be active and current

AWS Certified DevOps Engineer – Professional (DOP-C02) — mandatory, must be active and current

AWS Certified Security – Specialty — strongly preferred

Certified Kubernetes Administrator (CKA) — preferred

HashiCorp Terraform Associate or Professional — preferred

Experience with multi-cloud strategy — Azure or GCP alongside AWS

Prior experience in an IT services or consulting firm managing 10+ concurrent client engagements

DEPARTMENT OVERVIEW

NexGen Solutions' Cloud Platform Practice is responsible for designing, delivering and operating AWS cloud infrastructure for 20+ enterprise clients across BFSI, manufacturing and retail sectors. The practice runs 150+ AWS accounts and processes over 10TB of data daily. The Principal Cloud Engineer will lead the technical direction of this practice and own the platform engineering standards that all client environments are built on.

GENERAL JOB DESCRIPTION

This is a hands-on technical leadership role — not a pure management position. You will be writing CloudFormation templates, reviewing Terraform code, debugging production incidents and building automation frameworks alongside your team. At the same time you will be setting architectural direction, mentoring engineers and representing the practice in client-facing engagements. We expect the Principal Cloud Engineer to be the deepest technical resource on the team — the person others come to when stuck.

MAJOR DUTIES AND RESPONSIBILITIES

Design multi-account AWS platform architecture — Organizations, Control Tower, account vending, SCPs and guardrails

Own IaC library — CloudFormation nested stacks and Terraform enterprise module library maintained to production standards

Lead DevSecOps pipeline design — SAST, DAST, IaC scanning, compliance-as-code integrated into CI/CD

Drive cloud security posture — automated findings remediation, security baseline enforcement across all client accounts

Deliver FinOps programme — monthly cost reviews, savings recommendations and chargeback reporting

Lead team of 5–8 engineers — code reviews, architecture reviews, 1:1s, growth planning and performance management

Client engagement — architecture workshops, Well-Architected reviews, executive presentations and technical proposals

P0/P1 incident leadership — incident command, root cause analysis and preventive action

Platform standard setting — IaC patterns, naming conventions, tagging strategy, runbook standards

REQUIRED SKILLS

8–12 years total IT experience with minimum 5 years hands-on AWS in production enterprise environments — not sandbox or lab experience

Multi-account AWS Organizations — Control Tower, StackSets, account vending, SCP design — must have built and operated, not just reviewed

CloudFormation — nested stacks, custom resources, StackSets, drift detection — enterprise-scale IaC ownership

Terraform — enterprise module library, Sentinel policy-as-code, state management at scale — must show GitHub repository evidence

Python — production-grade boto3 automation framework, not scripting — minimum 500 lines of production Python code in a real environment

Kubernetes on AWS EKS — production cluster ownership, Helm, ArgoCD, Karpenter — not just basic deployment experience

AWS security — advanced IAM, KMS, CSPM, zero-trust design — Security Hub, GuardDuty, Config, Inspector in production

Team leadership — minimum 2 years leading a cloud engineering team of 4+ engineers with evidence of team growth and delivery outcomes

FinOps — must have delivered measurable cost savings with documented outcomes — we require specific dollar figures in interview

Client-facing — must have presented to CTO or VP-level stakeholders independently — not alongside a sales team

PREFERRED QUALIFICATIONS

AWS Certified Solutions Architect – Professional (SAP-C02) — active certification mandatory for this role

AWS Certified DevOps Engineer – Professional (DOP-C02) — active certification mandatory for this role

B.Tech / B.E. / M.Tech in Computer Science, IT or Electronics Engineering from a recognised institution

Mandatory Skills : AWS Organizations,AWS Control Tower,AWS CloudFormation,Terraform,Python,AWS EKS,Kubernetes,AWS Security Hub,AWS GuardDuty,AWS Config,AWS IAM,AWS KMS,AWS VPC,AWS EC2,AWS RDS,AWS Lambda,AWS S3,AWS CloudWatch,GitHub Actions,AWS CodePipeline,Docker,Helm,ArgoCD,FinOps,Team Leadership,Client Engagement

Good to Have Skills : AWS Certified Security Specialty,CKA,Terraform Professional,Azure,GCP,Datadog,Prometheus,Grafana,AWS X-Ray,AWS Direct Connect,AWS Transit Gateway,Sentinel Policy-as-Code