Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change.
 
By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses.
 
From prototype to real-world impact - be part of a global shift by doing work that matters.

About the Role

You will be the primary architect and operator of our multi-cloud ecosystem. This is a high-impact, generalist role that requires a deep understanding of the entire technology stack—from the underlying operating systems and networking to container orchestration and automated governance. You will design, secure, and scale the infrastructure that powers our global applications while mentoring engineering teams on cloud-native best practices.

Responsibilities

● Design and implement secure, multi-account structures and landing zones across AWS.

● Manage and evolve multi-cloud IAM, SSO, and Role-Based Access Controls (RBAC) to ensure least-privilege access.

● Enforce tagging standards, resource hierarchies, and cost-optimization strategies (rightsizing, idle resource elimination) to maintain fiscal accountability.

● Lead the deployment, scaling, and management of Kubernetes clusters (EKS, GKE, or self-managed). Manage CNI plugins, ingress controllers, and service meshes (Istio/Linkerd).

● Administer and optimize Linux (Ubuntu, Amazon Linux, RHEL) and Windows Server environments, ensuring hardened configurations and automated patching.

● Manage the intersection of cloud services and traditional OS-level dependencies, including Active Directory integration and file system performance tuning.

● Develop and maintain modular templates using Terraform, CloudFormation, or Pulumi.

● Build and optimize deployment pipelines using GitHub Actions, GitLab CI, Flux, or ArgoCD to enable "GitOps" workflows.

● Design security controls including encryption at rest/transit (KMS), VPC Service Controls, and audit logging to meet SOC2, HIPAA, or FedRAMP standards.

● Leverage AI-native development tools (e.g., Cursor, GitHub Copilot) and LLM-powered agents to accelerate Infrastructure-as-Code (IaC) authoring, automate complex root-cause analysis, and proactively optimize cloud utilization through predictive anomaly detection.

● Integrate SonarQube into CI/CD pipelines and manage secure, role-based, auditable infrastructure access using StrongDM.

● Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related field.

● 5+ years of experience

Required AWS Skills

• Strong hands-on experience with EC2, VPC, IAM, Security Groups, Route 53, S3, EBS, EFS, ELB/ALB, Auto Scaling, CloudWatch, KMS, SNS, and Lambda.
• Experience managing containerized workloads using ECS and/or EKS.
• Good understanding of AWS networking, including VPCs, public/private subnets, NAT Gateway, Internet Gateway, Route Tables, VPN, and VPC Peering.
• Experience implementing IAM roles, policies, and least-privilege access.
• Knowledge of backup, disaster recovery, and high availability architectures.

Infrastructure as Code

• Strong experience with Terraform for provisioning and managing AWS infrastructure.
• Good understanding of Terraform modules, remote state, workspaces, variables, and state management.
• Exposure to AWS CloudFormation is desirable.

CI/CD & Automation

• Experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or AWS CodePipeline.
• Experience automating deployments and infrastructure provisioning.

Monitoring & Logging

• Hands-on experience with CloudWatch, CloudTrail, and centralized logging.
• Experience creating alarms, dashboards, and monitoring infrastructure health.

Containers

• Good understanding of Docker.
• Experience deploying and managing applications on ECS or EKS.
• Knowledge of Amazon ECR.

Security

• Experience implementing AWS security best practices.
• Knowledge of Secrets Manager, Parameter Store, encryption (KMS), and compliance principles.

At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empowered to be their best. We welcome applications from people of all backgrounds, experiences, and perspectives—because we know that inclusive teams help us deliver smarter, more innovative solutions for our customers. Hiring decisions are based on merit, skills, qualifications, and potential. If you need adjustments or support during the recruitment process, please let us know.