IT Cloud Engineer

Job Number: 25-05629

Use your skills where innovative technology solutions begin. ECLARO is looking for an IT Cloud Engineer for our client in Temecula, CA.

ECLARO’s client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. If you’re up to the challenge, then take a chance at this rewarding opportunity!

Position Overview:

• Cloud Engineer with deep experience in both AWS and Azure to design, build, and operate secure, scalable, cost-efficient cloud platforms.
• Work core infrastructure, guide architecture, and level-up engineering practices across networking, identity, observability, and security.
• The Cloud Engineer is responsible for creating a secure path to production across AWS and Azure centered on Kubernetes, identity-first access, and DevSecOps.
• Design and operate resilient EKS platforms of multi-cluster, GitOps, admission control, network policies, and end-to-end identity patterns.
  
  

Responsibilities:

• Design and Build: Multi-account/subscription landing zones, VPC/VNet topologies, private connectivity (Transit Gateway, PrivateLink/Private Endpoint, VPN/Direct Connect/ExpressRoute), and secure baseline controls.
• Platform Ops: Run production environments (patching, backups, DR, autoscaling, capacity planning, OS/hypervisor images, AMIs/VM images).
• Identity & Security: Implement least-privilege IAM/Entra ID, SSO, Conditional Access, secrets management (AWS KMS, Azure Key Vault), and policy guardrails (SCPs, Azure Policy).
• Networking: Build resilient L3/L7 routing, load balancing (ALB/NLB, Azure LB/App GW), DNS, TLS, and service-to-service connectivity (PrivateLink, VNet peering, TGW).
• Observability: Standardize logging/metrics/tracing (CloudWatch, Azure Monitor/Log Analytics), create SLOs/dashboards, and incident response runbooks.
• Author high-fidelity analytics (KQL) mapped to MITRE Telecommunication & CK, tune noisy rules, implement UEBA, and wire SOAR/playbooks for auto-containment (isolate instance, block token, rotate keys, disable user).
• Normalize/ingest logs from cloud control planes, EDR, firewalls, API gateways, containers, and serverless into SIEM.
• Shift-left controls in CI/CD (GitHub Actions and Azure DevOps).
• Lead Kubernetes cluster lifecycle management (provisioning, upgrades, scaling, monitoring, troubleshooting).
• Lead efforts around observability, policy enforcement, cost optimization, and RBAC/security hardening within the Kubernetes cluster.
• Support CI/CD pipelines and GitOps-based deployments.
• Ability to troubleshoot issues related to networking, storage, interdependencies, security, etc.
• Building highly available, cost efficient, fault tolerant, and scalable distributed systems.
• Ensure the stability, integrity and efficient operation of the infrastructure.
• Manage Linux based tools, position requires experience with Linux and scripting.
• Writing and enforcement of security policies in a cloud environment.
• Assist in reviewing logs, writing alerts, and tag management.
• Configure and maintain permission sets and access privileges to all cloud resources.
• Continuously manage the configuration of all AWS Org environments and AWS services.
• Accountability: Incumbent is responsible for protecting the assets of Client and for maintaining and providing a constructive and professional work environment.
  
  

Qualifications:

• Bachelor's degree or equivalent in IT, computer science or related field; and a minimum of (7) years or more of relevant work experience; or Equivalent combination of education and progressive, relevant and direct experience may be considered in lieu of minimum educational/experience requirements indicated above.
• 6 years working in an enterprise level environment designing, building server, storage & network solutions in virtualized environments.
• 3 years of experience implementing private/public and/or hybrid cloud solutions.
• 3 year experience in container technology like Docker, Kubernetes or EKS.
  
  

If hired, you will enjoy the following ECLARO Benefits:

• 401k Retirement Savings Plan administered by Merrill Lynch
• Commuter Check Pretax Commuter Benefits
• Eligibility to purchase Medical, Dental & Vision Insurance through ECLARO
  
  

If interested, you may contact:

Homer Ballega

homer.ballega@eclaro.com

2013759070

Homer Ballega | LinkedIn

Equal Opportunity Employer: ECLARO values diversity and does not discriminate based on Race, Color, Religion, Sex, Sexual Orientation, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status, in compliance with all applicable laws.