Key Responsibilities

- Implement WS1 network segmentation author parameterised CloudFormation templates for NACL and Security Group three-tier enforcement across all 8 multi-account environments; coordinate Transit Gateway routing and Network Firewall egress impact with the Cloud/Infrastructure Lead

- Execute WS3 ECS-to-Fargate migration update all ECS task definitions to Fargate launch type, configure awsvpc networking, create new ALB target groups, implement the CAS port change, simplify EFS mount points, configure horizontal auto-scaling, and execute connectivity validation

- Build and test WS1 and WS3 rollback automation NACL/SG CloudFormation stack revert, Fargate task-definition rollback to previous ECS configuration; test in non-production before any production window

- Own the OpenSearch platform layer for WS8 — deploy OpenSearch clusters per environment, design index templates and ILM policies, configure RBAC (fine-grained access control), set retention policies, build ingest pipelines for log transformation

- Integrate QRadar log forwarding for WS8 — configure Filebeat or Logstash pipeline, field mapping to QRadar DSM schema, validate end-to-end log flow in partnership with the Security Engineering Lead (event routing) and Senior Java Governance Lead (application logging contract)

- Conduct load testing and connectivity validation for WS3 post-migration — verify application traffic flows correctly through recent ALB target groups, measure latency, validate EFS performance





- All delivery through the Jenkins/Bitbucket/CloudFormation pipeline — no direct console changes on restricted accounts; coordinate with the Restricted-Account Cloud Engineer for restricted-account deployments

- Support the Cloud Engineer OS/Patching as backup on WS1 template testing in ITE/QA environments

Must-Have Skills & Experience

- 6+ years AWS cloud infrastructure engineering; 3+ years on network segmentation and containerised workload delivery

- AWS networking expert — VPC (NACL and Security Group three-tier design), Transit Gateway route tables and attachment policies, AWS Network Firewall stateful rule groups, PrivateLink, VPC Flow Logs delivery to S3 and CloudWatch

- ECS and Fargate — task definition authoring (Fargate launch type), awsvpc networking model, ALB/NLB target group configuration, EFS mount points, Fargate service auto-scaling (Application Auto Scaling), container health checks

- CloudFormation — parameterised multi-account templates, CFN-LINT and cfn-nag compliance, cross-stack references, Conditions and Mappings

- OpenSearch (or Elasticsearch) — cluster deployment on AWS, index template design, Index Lifecycle Management (ILM) policy authoring, fine-grained access control (RBAC), ingest pipeline configuration





- Log pipeline tooling — Filebeat or Logstash configuration for log forwarding, field mapping, QRadar DSM integration, pipeline testing and validation

- Load testing and connectivity validation — AWS-native or third-party tooling to validate post-migration traffic flows, latency, and throughput

- Jenkins and Bitbucket — pipeline execution, IaC deployment automation, PR workflow

- Ansible — playbook authoring for infrastructure configuration tasks supporting WS1/WS3 deployment

- Rollback automation — CloudFormation stack revert scripts, Fargate task-definition rollback runbooks, tested in non-production

Nice-to-Have Skills

- AWS Advanced Networking Specialty certification

- AWS Network Firewall — centralized egress via Transit Gateway, domain allowlist stateful rule groups

- OpenSearch Dashboards (Kibana) — dashboard design for log observability and operational visibility

- ECS Service Connect or AWS App Mesh — service mesh context for post-Fargate migration

- Filebeat and Logstash — advanced pipeline configuration including dead-letter queues and back-pressure handling

- Terraform — IaC cross-referencing context even though this engagement uses CloudFormation

Tools & Platforms

CloudFormation, AWS VPC (NACLs, Security Groups), Transit Gateway, Network Firewall, ECS/Fargate, ALB/NLB, EFS, Application Auto Scaling, OpenSearch (cluster management, index templates, ILM, RBAC, ingest pipelines), Filebeat, Logstash, QRadar (integration), Ansible, Jenkins, Bitbucket, CFN-LINT, cfn-nag, VPC Flow Logs, CloudWatch, AWS CLI, Python/Boto3

📌 Cloud Platform Engineer (Hyderabad)
🏢 SysTechCorp
📍 Hyderabad