Plutus21 is seeking a Cloud Engineer to join our core platform team and take ownership of deployment, tenant isolation, and platform operations. The Cloud Engineer will package and operate the platform across multiple client environments, whether hosted by Plutus21 or within a client's own cloud, while keeping client data secure and isolated. This role works closely with the Principal Platform Engineer and the AI Engineer and is essential to scaling the platform across clients and products.
Key Responsibilities
• Package the platform as a containerized deployment unit per client, with identical code running in every environment.
• Build and maintain infrastructure-as-code modules using Terraform or Pulumi, starting with AWS and designed to extend to other cloud providers.
• Keep stateful components portable, including PostgreSQL, S3-compatible object storage, OIDC identity, and pluggable secrets management.
• Implement and test tenant isolation, including isolation between sub-tenants within a single client.
• Control data egress at the infrastructure level so that only declared, client-authorized outbound connections are permitted.
• Operate hybrid deployments in client-hosted environments, including outbound-only connections to the control plane for releases and health monitoring, with no transfer of client data.
• Define and support the shared-responsibility model and service level agreements for client-hosted environments.
• Manage upgrades and releases across multiple environments within a supported-version window, without configuration drift.
• Establish baseline security and observability, including SSO, audit logging, encryption, monitoring, and alerting.
• Write clear design notes and runbooks, and document decisions before implementation begins.
Qualifications
• Proven experience owning Terraform or Pulumi codebases in production, including reusable modules and deliberate management of state and drift.
• Hands-on experience running Kuberne