Cloud Engineer

FP Markets

2d • Remote

About The Position

FP Markets Group of Companies is a well-established multi-regulated broker, founded in Australia, offering traders access to CFD trading on Forex, Indices, Commodities, Stocks and Cryptocurrencies. We are growing and looking to recruit a Full-time Cloud Engineer - Remote. We're looking for a Cloud Engineer to design, build, and operate our cloud platform. You'll own AWS infrastructure end-to-end — provisioning, identity, secrets, observability — and deliver a self-service, secure, and well-instrumented platform for engineering teams.

Requirements

• 3+ years in cloud / platform / DevOps engineering roles
• Strong hands-on AWS experience (Organizations, IAM, VPC, EC2, RDS, EKS/ECS, Lambda, S3, KMS)
• IaC proficiency — Terraform in production (modules, state management, CI/CD)
• Production experience with Keycloak — realms, clients, identity brokering, OIDC / SAML
• Production experience with HashiCorp Vault — policies, secret engines, auth methods
• SSO / federation experience — OIDC, SAML, SCIM
• Observability with Prometheus and Grafana — dashboards, PromQL, Alertmanager
• Solid Linux, networking (L2/L3, VLAN/VXLAN), and scripting (Python / Bash / Go)
• Git-based workflows with peer review and CI

Nice To Haves

• VMware vCloud / vSphere experience for hybrid or on-prem workloads
• Multi-account AWS Organizations / Control Tower setups
• Kubernetes (EKS) in production
• GitOps tooling (ArgoCD, Flux)
• Experience in regulated environments (fintech, financial services, DORA, SOC 2, ISO 27001)
• Cost optimization and FinOps practice

Responsibilities

• Design, deploy, and operate AWS infrastructure across multiple accounts and environments
• Build and maintain Infrastructure as Code — Terraform modules, pipelines, drift detection
• Own identity and access: SSO integration, Keycloak realms, IdP federation, RBAC
• Operate HashiCorp Vault for secrets management — policies, auth methods, dynamic credentials, rotation
• Build and maintain the observability stack — Prometheus, Grafana, dashboards, alerting
• Implement landing zones, account vending, networking, and guardrails
• Partner with security and SRE on compliance, hardening, and incident response
• Automate operational work — provisioning, access reviews, certificate and secret rotation
• Document architecture, runbooks, and onboarding guides
• Participate in on-call rotation for platform services

Benefits

• Continuous personal development, training budget, growth with the company and opportunity to learn from industry leaders
• Competitive remuneration, regular salary reviews and performance-based incentive schemes
• Visa and work permit support if required
• Fully remote work with provision of a laptop or reimbursement for equipment

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed