Role: Cloud engineers
Location: Pittsburgh, PA, Lake, Mary, Or Jersey City, NJ (to hybrid )
Client: BNY Mellon
Experience: 7+ yrs preferred
- Needs:
- AZURE
- GCP Nice to have. Aws Nice to Have
- TERRAFORM is super important
- Platform Engineering- Go, Python, Java
- Greenfield Cloud development, not just deployments
- Cloud Native Experience- Nice to have
Job description:
Role Overview:
We are seeking experienced Cloud Engineers to support BNY Mellon's cloud transformation initiatives. These roles are hands-on engineering positions focused on infrastructure automation, cloud security posture, and scalable platform design—NOT application development or support.
Key Technologies:
- Infrastructure as Code: Terraform Enterprise (critical)
- Programming: Python (must-have), Java (optional)
- Containers: Docker, Kubernetes (AKS preferred)
- Security: Azure AD/IAM, AWS IAM fundamentals
- Serverless (nice-to-have): Azure Functions, AWS Lambda
Core Capabilities & Responsibilities
🔹 Azure Platform Engineering
- Design/manage VNets, subnets, NSGs, Azure Firewall, VPN Gateway/ExpressRoute
- Deploy/update resources using Terraform
- Configure Azure AD service principals, RBAC, managed identities
🔹 GCP & AWS Exposure (Secondary)
- GCP: VPC networks, firewall rules, IAM roles, Compute Engine & GKE via Deployment Manager or Terraform
- AWS: VPCs, IAM roles/policies, Auto Scaling, CloudFormation or Terraform
🔹 Infrastructure as Code
- Author modular Terraform Enterprise configurations
- Use remote state and workspace management
🔹 Programming & Automation
- Develop automation scripts and cloud-native tooling in Python
- Implement robust error handling and integration with cloud services
🔹 Containers & Kubernetes
- Build/publish Docker images to ACR/ECR/GCR
- Deploy/manage Kubernetes workloads (AKS/GKE), Helm charts, rolling updates
🔹 Cloud Security Integration
- Azure AD: RBAC, service principals, conditional access
- AWS IAM: least-privilege policies, cross-account roles, SAML/OIDC federation
🔹 Serverless (Desirable)
- Build event-driven functions
- Integrate with storage/messaging services
- Manage function versions and durable workflows
