Cloud Solution Engineer

Top 3 reasons to join us

• Excellent environment and team to help you grow
• The best vehicle diagnostic information company
• Competitive salary and learning culture

Job description

We are seeking a skilled Cloud Solution Engineer to support and maintain our cloud and infrastructure environment across AWS, Azure, and GCP. This role is responsible for ensuring stable, secure, and efficient operations across cloud platforms, network services, identity integration, and application delivery systems.

The ideal candidate will have strong hands-on experience in multi-cloud administration, network and firewall configuration, CI/CD support, and production troubleshooting. This position works closely with infrastructure, security, and application teams to support business continuity and operational excellence.

Responsibilities

• Administer and support cloud environments across AWS, Azure, and GCP.
• Configure and maintain firewall rules, routing, NAT, and related network settings.
• Support and maintain CI/CD pipelines and deployment processes.
• Install, configure, and troubleshoot Nginx services.
• Support Active Directory integration and access management.
• Monitor cloud and infrastructure services, respond to incidents, and resolve technical issues.
• Maintain documentation for configurations, procedures, and operational standards.
• Collaborate with internal teams to support security, compliance, and system reliability.

Your skills and experience

Required Qualifications

• Proven experience working with AWS, Azure, and GCP.
• Strong knowledge of firewall configuration and network configuration, including routing and NAT.
• Experience with CI/CD tools and deployment automation.
• Experience managing Nginx in a production environment.
• Working knowledge of Active Directory.
• Strong troubleshooting and problem-solving skills.
• Ability to work independently and communicate effectively with technical teams.
• Willingness and ability to work on-site, full-time, at the company's office (this role is not remote or hybrid).

SSL/TLS Certificate Lifecycle Management

• Hands-on experience with SSL/TLS certificate procurement, issuance, renewal, and revocation across enterprise environments.
• Proficiency with certificate formats and workflows: PEM, PFX/PKCS#12, CSR generation, private key management, and chain trust validation.
• Experience deploying and binding certificates on IIS, Apache, Nginx, and other web servers; troubleshooting binding mismatches, chain errors, and private key association issues.
• Familiarity with Let's Encrypt / Certbot and ACME protocol-based automation for certificate issuance and renewal.
• Experience with AWS Certificate Manager (ACM) — provisioning, DNS/email validation, and integrating with ALB, CloudFront, and API Gateway; understanding ACM's scope limitations (AWS-managed services only) vs. imported certs for EC2/on-prem use.
• Exposure to Azure Key Vault certificate management — importing, auto-renewal policies, and integration with App Service, Application Gateway, and Azure Front Door.
• Familiarity with GCP Certificate Manager or managed SSL on Google Cloud Load Balancing; understanding of Google-managed vs. self-managed certificate workflows.
• Understanding of Windows ADCS (Active Directory Certificate Services) for internal PKI — CA hierarchy, certificate templates, and auto-enrollment via Group Policy.
• Awareness of CA/Browser Forum compliance trends, including the shift toward shorter certificate validity windows (sub-90-day by 2027) and the operational need for automation.
• Experience with certificate monitoring and alerting to prevent expiry-related outages.

Information Security Management (ISO/IEC 27001 & TISAX)

• Proven experience in information security management, cybersecurity, or IT governance.
• Experience implementing and maintaining an Information Security Management System (ISMS).
• Strong knowledge of TISAX requirements and the VDA ISA catalogue.
• Good understanding of ISO/IEC 27001 principles, risk management, security controls, and compliance requirements.
• Ability to manage and improve information security policies, procedures, risk assessments, and security awareness activities.
• Experience coordinating audits and managing corrective action plans.
• Understanding of automotive cybersecurity requirements is an advantage.

Preferred Qualifications

• Experience with Terraform, Ansible, or other infrastructure automation tools.
• Experience with Linux administration.
• Experience with Windows Server administration.
• Knowledge of DNS, VPN, load balancing, and hybrid cloud connectivity.
• Experience supporting enterprise cloud operations.
• Scripting experience in Bash or PowerShell.
• Relevant cloud certifications (e.g., AWS Solutions Architect, Azure Administrator, or Google Cloud Engineer).
• Experience with container orchestration using Docker and Kubernetes.
• Familiarity with monitoring and observability tools (e.g., Prometheus, Grafana, Datadog, or CloudWatch).

Certifications and Training (Information Security)

• ISO/IEC 27001 Lead Implementer or Lead Auditor.
• PECB — ISO/IEC 27001 Lead Implementer / Lead Auditor.
• TÜV or similar bodies — ISO/IEC 27001 Auditor / Implementer qualifications.
• TISAX Practitioner / TISAX Implementer training.
• CISSP, CISM, or equivalent cybersecurity certifications.

Why you'll love working here

Company Benefits:
- 15 Vacation days, 5 sick days and Holiday.
- 2 paying days for Christmas holiday.
- Paid foreign language school English, Chinese, Japanese, Spanish.
- Paid Health and Life insurance for employees and family.
- Opportunity to travel abroad.
- Salary based on your abilities and contribution.
- Professional working environment.
- Project and performance bonus.