Description:

CluneTech is a global technology group that provides solutions to simplify international business, including digital sales, global payroll, global VAT, tax compliance, and cross-border payments. The group is headquartered in Kilkenny, Ireland, and publicly lists more than 1,200 employees, 35 offices, and operations across 20 countries.

About the role:

We are looking for an AWS CloudOps Engineer to build and run the cloud platform behind a regulated fintech estate. You will work across multiple AWS accounts and environments on infrastructure engineering, Terraform-driven automation, CI/CD, Linux systems operations, observability and cost optimisation.

Two things make the role different from a standard cloud operations post. First, Linux is not an afterthought: a meaningful part of the estate runs on Amazon Linux 2023 and RHEL - based hosts that will patch, harden, tune and troubleshoot. Second, we are putting approved AI - assisted engineering in day - to - day operations - Amazon Bedrock, Anthropic Claude models and Kiro - you will help decide where it genuinely improves documentation, code quality, operational efficiency and incident response and where it does not.

You will work alongside Database Architect, who owns PostgreSQL and SQL server platform, and with the application teams whose services you help modernize.

Scope of work:

The prorgam that shapes this role is Fintua Comply migration from SQL Server on Amazon RDS to Aurora PostgreSQL, and the technical and architectural dept that platform carries. Our Database Architect owns the database side; you own the platform the migration lands on and the pipelines that carry change to it.

What that means in practice:

• Build the target platform as code. Terraform for the Aurora PostgreSQL landing zone, networking, parameter and secrets handling, the AWS DMS replication infrastructure, and the non - production environments the migration rehearsed in.

• Make the cutover observable. Dashboards and alarms that show replication state, migration progress, host and cluster health, and whether the alarm actually fires on the condition it claims to - some of ours do not, and fixing that is in scope.

• Enforce quality in the pipeline. Automated schema drift detection - a drift runner - wired into CI/CD as a pre - release gate, so a release carrying unapproved structural change is blocked rather than discovered in production. You build and own the enforcement; the Database Architect defines what counts as a drift.

• Close the environment - parity gap. QA, UAT and staging environments that are refreshed from production and genuinely comparable to it, so that pre - release testing means something and change stops being validated on a production canary.

• Modernize the application tier. The Comply estate is polyglot - around thirty .NET services plus PHP worker tiers - running on ECS and Fargate alongside Linux hosts. Containerization, event driven patterns, right - sized task definitions, memory and GC limits that match the container, and safer deployment strategies all sit here.

• Pay down platform dept. Legacy hosts to patch and harden, orphaned infrastructure left behind by earlier migration attempts, log volumes that cost more that they inform, idle oversized resources, and runbooks that do not tach reality.

• Keep the cost of the program honest. Migrations runs two platforms in parallel for a while. Tracking that, retiring what is not longer needed, and reporting it is part of the job.

Alongside Comply, the role covers day - to - day cloud operations across the wider estate described below.

Responsibilities:

1. AWS Infrastructure Engineering

• Design, deploy and manage AWS infrastructure supporting production financial workloads.

• Work with services including EC2, ECS/ Fargate, RDS, Aurora, S3, VPC, Lambada, CloudWatch, Secrets Manager, IAM,DynamoDB, SQS, SNS, EventBridge, API Gateaway, AWS IAM Identity Center and QuickSight.

• Implement and maintain Infrastructure as Code using Terraform, CloudFormation or AWS CDK.

• Manage infrastructure across multiple AWS accounts and environments, including guardrails and account - level standards.

• Build and optimize CI/CD pipelines using tools such as GitLab CI, GitHub Actions, AWS CodePipeline or equivalent.

• Implement release quality gates in those pipelines, including automated schema drift detection, environment parity checks and evidence capture, so that unapproved structural change is blocked before release.

• Build and maintain QA, UAT and staging environments that are refreshed from production and comparable to it, so pre - release resting is meaningful.

1. Linux System Administration

• Manage Amazon Linux 2023 and RHEL - based systems across production and non - production environments.

• Perform patching, hardening, performance tuning, log management and operational troubleshooting.

• Administer Apache HTTP Server, including virtual hosts, SSL/ TLS, module configuration and runtime troubleshooting.

• Manage system services, EBS/ EFS storage, filesystem permissions and automated deployment workflows.

• Write and maintain Bash scripts for automation, monitoring, deployment and operational tasks.

• Implement host - level security controls including SSH hardening, firewall rules, least - privilege access, log forwarding vulnerability remediation.

1. Observability and Operations

• Implement monitoring, alerting, logging and observability using CloudWatch, dashboards, metrics, alarms and log aggregation.

• Tune alarms so that they fire on real conditions, and reduce noise and alert fatigue.

• Participate in incident response: triage, diagnosis, mitigation, communication and post - incident follow up.

• Build automation that improves alert enrichment, operational insight and repeatable engineering workflows.

• Support operational readiness for new services, including runbooks, dashboards and alerting before go - live.

1. AI - Assisted Engineering and Automation

• Use approved AI - assisted engineering tools to improve operational workflows, documentation, code review and troubleshooting.

• Work with Amazon Bedrock and supported large language models, including Anthropic Claude models where approved for company use.

• Use Kiro, AWS's agentic coding service, where appropriate to support spec - driven development, documentation, testing and implementation planning.

• Evaluate AI - assisting tools for infrastructure operations, anomaly detection, documentation generation and incident support.

• Monitor and report AI tooling usage and cost, and keep the value of each use case honest.

• Ensure AI usage follows company security, data protection, privacy and compliance policies.

1. Cost Optimization and FinOps

• Execute cost optimization initiatives across compute, storage, database, data transfer and managed services.

• Build and maintain AWS QuickSight dashboards for billing analytics, cost allocation, usage trends and financial reporting.

• Support recurring FinOps activities including monthly spent reviews, rightsizing, Savings Plans and Reserved Instance analysis and wase elimination.

• Maintaining tagging and cost allocation standards so that spend can be attributed to teams and products.

1. Application Modernization and Rearchitecture

• Contribute to the rearchitecture of monolithic transactional applications into modern, resilent AWS - native patterns.

• Support containerization strategies using Docker, ECS and Fargate.

• Design and implement event - driven patterns using SQS, SNS and EventBridge.

• Support blue/ green and canary deployment strategies for safer releases and reduced downtime.

• Improve application reliability, scalability, observability and operational maintainability.

1. Documentation, Security and Compliance

• Product clear technical documentation for completed work, including architecture decisions, runbooks, migration plans, configuration records and operational procedures.

• Maintain standard operations procedures and incident response runbooks.

• Support ISO 27001 audit activity by providing evidence of infrastcuture controls, change history, access controls, monitoring and operational procedures.

• Contribute to change management processes, including risk assessment, implementation planning, rollback planning and CAB submissions.

• Apply least - privilege, secure - by - design and auditability principles across all infrastructure and operational work.

Requirements:

• 4+ years in DevOps, SRE, Cloud Engineering, CloudOps or Infrastructure Engineering, including at least 3 years of hands - on AWS experience.

• Hands - on experience with EC2, ECS/ Fargate, S3, VPC, IAM, Lambda, CloudWatch and Secrets Manager.

• Strong Terraform, Cloud Formation or AWS CDK experience, with infrastructure managed as code in version control.

• Experience building and maintaining deployment pipelines using GitLab CI, GitHub Actions, AWS CodePipeline or equivalent.

• Advanced Linux administration experience, preferably with Amazon Linux and RHEL - based distributions.

• Strong Bash scripting and automation skills.

• Practical experience with VPCs, routing, subnets, security groups, NACLs, VPNs and Transit Gateway.

• Strong understanding of IAM, encryption, secrets management, patching, access control and last - privilege desing.

• Practical interest or experience in AI - assisted engineering: Amazon Bedrock, Kiro LLMS, prompt engineering or AI - supported workflows.

• Working knowledge of managed databases as a consumer: provisioning RDS or Aurora instances, parameter groups, monitoring, connectivity and secrets handling - deep DBA skills are not required for this role.

• Experience supporting a migration or modernization program from the platform side: building the target environment as code, rehearsing it in non - production, and keeping it observable throughout cutover.

• Experience building release gates and environment parity into pipelines, rather than relying on manual checks before a release.

• Ability to produce clear, complete, audit - ready technical documentation.

• Excellent written and spoken English, with the ability to explain complex technical topics to varied audiences.

Desirable Skills:

• Experience in regulated financial services, payments, banking or similar environments.

• ISO 27001, SOC 2, PCI DSS or other audit and compliance exposure.

• AWS Solutions Architect Professional, AWS DevOps Engineer Professional or equivalent certification.

• Direct Connect, Transit Gateway, Site - to - Site VPN, IPAM and multi - account networking.

• AWS cost optimization, CUR analysis, QuickSight billing dashboards, Savings Plans, Reserved Instances and tagging strategies.

• Docker, ECS task definitions, Fargate, service discovery and service mech concepts.

• Amazon Bedrock, Kiro, SageMaker, Claude models, AI - assisted development or AI enabled operational automation.

• AWS DMS operations from the platform side: replication instance sizing, task monitoring, CDC behavior and troubleshooting.

• .NET or Linux containers, including container memory and GC limits, and PHP worker tiers.

• Experience with log aggregation, distributed tracing, SLOs, dashboards and incident response workflows.

• Python or another scripting language in addition to Bash.

• Edge and perimeter services: CloudFront, WAF, Shield, Route 53.

Benefits:

What’s in it for you?