Cloud DevOps Engineer / Cloud Architect (AWS + Terraform/OpenTofu + EKS + OS Management)

Cloud DevOps Engineer / Cloud Architect (AWS + Terraform/OpenTofu + EKS + OS Management)

Location: New York, NY (located near Penn Stations South) or Dallas, TX

Summary

This role combines Cloud DevOps engineering and architectural responsibilities, focusing on designing, automating, and managing secure, scalable, and cost-optimized cloud environments. The position requires expertise in AWS services, Infrastructure as Code (IaC), container orchestration, OS management, AI/ML integration, and modern application architectures.

Responsibilities

Architect and design cloud infrastructure solutions leveraging AWS IaaS (EC2, VPC, IAM) and PaaS (Lambda, RDS, ECS).
Define high-level architecture diagrams, reference architectures, and best practices for multi-cloud deployments.
Ensure scalability, high availability, and disaster recovery in all designs.
Automate provisioning and configuration using Terraform or OpenTofu.
Deploy and orchestrate containerized workloads using Amazon EKS and Kubernetes.cl
Build and maintain CI/CD pipelines for application delivery and infrastructure updates.
Administer Linux and Windows servers, including patching, hardening, and performance tuning.
Implement automated patch management using tools like AWS Systems Manager, WSUS, Ansible, or SCCM.
Monitor system health and performance using CloudWatch, Prometheus, Grafana, and native OS tools.
Ensure compliance with security policies and best practices across cloud and OS layers.
Perform deep troubleshooting across all layers:
Network (VPC, NACLs, Security Groups)
IAM permissions and policy conflicts
Kubernetes cluster failures, Helm misconfigurations
CI/CD pipeline errors and rollback strategies
OS-level performance bottlenecks and kernel issues
Root cause analysis and permanent fixes for outages

Infrastructure as Code (IaC)

Design and implement IaC using Terraform and OpenTofu across multi-cloud environments.
Develop reusable modules and manage state files with remote backends and workspaces.
Automate workflows and CI/CD pipelines using Python and tools like Jenkins, GitHub Actions, or GitLab CI.
Integrate policy-as-code frameworks such as Open Policy Agent (OPA) or Terraform Sentinel for governance.
Collaborate with security and compliance teams to enforce resource policies and automate audits.
Optimize cloud resources through tagging, lifecycle policies, and cost management strategies.
Document infrastructure designs, scripts, and operational procedures.

Required skills

7+ years of experience in Cloud Architecture and DevOps, designing and managing secure, scalable AWS environments.
7+ years of hands-on expertise with AWS IaaS (EC2, VPC, IAM) and PaaS (Lambda, RDS, ECS) services.
5+ years of experience implementing Infrastructure as Code (IaC) using Terraform/OpenTofu, including reusable modules and remote state management.
5+ years of experience deploying and orchestrating containerized workloads using Amazon EKS and Kubernetes.
Strong proficiency in CI/CD pipeline design, automation scripting (Python), and integration with tools like Jenkins, GitHub Actions, or GitLab CI.
Experience in AI/ML integration, including Amazon SageMaker, Bedrock, and designing AI Landing Zones for predictive and generative AI workloads.
Expertise in modern application architectures, including event-driven, serverless (AWS Lambda), and microservices design.
Proven ability to lead offshore teams, in case of absence of offshore lead to manage client relationships, and delivering results aligned with SOW.

Desired Core Technologies:

AWS Services

EC2, VPC, IAM, S3, EBS, ELB, Auto Scaling

Lambda, RDS, DynamoDB, CloudFormation, Systems Manager Infrastructure as Code

Terraform / OpenTofu: modules, remote state, workspaces

YAML/JSON for IaC templates and configurations

Containers & Orchestration

Docker: image creation, registries, networking

Kubernetes: architecture, RBAC, Helm

Amazon EKS: provisioning, scaling, upgrades

DevOps & CI/CD

Git workflows, automated testing, deployment strategies

Proficiency in Python for scripting and automation

Familiarity with CI/CD tools and version control systems (e.g., Git), AWS CodePipeline

Knowledge of infrastructure governance, monitoring, and logging tools (e.g., Prometheus, Grafana)

Understanding of security best practices in cloud environments

OS Administration & Patching

Linux: Ubuntu, CentOS, Amazon Linux

Shell scripting, cron jobs, systemd, log rotation

Patch management via yum, apt, Ansible, AWS Systems Manager

Windows Server: AD, DNS, IIS, PowerShell Patch management via WSUS, SCCM,

AWS Systems Manager

Group Policy, scheduled tasks, event logs

Security & Monitoring

IAM policies, security groups, NACLs

CloudWatch, Prometheus, Grafana, ELK stack

Secrets management: AWS Secrets Manager, HashiCorp Vault

AI Ops & Integration

AI Landing Zone design and implementation.

AI/Apps integration using: Amazon Bedrock, Amazon SageMaker or ML frameworks for predictive and generative AI.

Expertise in ML and Gen AI for cloud-native applications.

Application Architecture

Event-driven architecture for scalable systems.

Serverless architecture leveraging AWS Lambda and managed services.

Microservices design and deployment.

AI-based applications using SageMaker and Bedrock

Life at Capgemini

Capgemini supports all aspects of your well-being throughout the changing stages of your life and career. For eligible employees, we offer:

Flexible work
Healthcare including dental, vision, mental health, and well-being programs
Financial well-being programs such as 401(k) and Employee Share Ownership Plan
Paid time off and paid holidays
Paid parental leave
Family building benefits like adoption assistance, surrogacy, and cryopreservation
Social well-being benefits like subsidized back-up child/elder care and tutoring
Mentoring, coaching and learning programs
Employee Resource Groups
Disaster Relief

About Capgemini

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to
engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem. The Group reported 2024 global revenues of €22.1 billion.

Get the future you want | www.capgemini.com

Disclaimer

Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.

This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodations do not pose an undue hardship.

Capgemini is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.

Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.

Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Capgemini.

Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $100,572 - $215,850. This role may be eligible for other compensation including variable compensation, bonus, or commission. Full time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees. Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.
Job Infrastructure
Schedule Full-time
Primary Location US-NY-New York
Other Locations US-TX-Dallas
Organization CIS US MS