Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 160 days ago

Senior Cloud Engineer (AWS / Azure / GCP) - VP

ms57 open roles

Where
New York, New York, United States of America
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Cloud Engineer (AWS / Azure / GCP) - VPms · New York, New York, United States of America

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ms's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.0% of postings close within 7 days. Measured by our own scanner across the market. ms postings stay open a median of 3 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 8.0%7 days
  4. 15.0%14 days
  5. 34.2%30 days
This job: posted 160 days ago

ms median: 3 days open

The posting

Role Summary

We are seeking a Senior Cloud Engineer / Site Reliability Engineer (SRE) to design, build, and operate secure, scalable cloud platforms across AWS, Azure, and GCP. This role is responsible for configuring, deploying, and maintaining virtual machines and containerized applications, using Terraform to automate infrastructure provisioning and lifecycle management. You will provide specialized support for high-stakes production deployments, lead incident response for technical escalations, and apply SRE principles (SLIs/SLOs, error budgets, automation, and reliability engineering) to improve availability, performance, and operational excellence in a multi-cloud environment.

Key Responsibilities

Cloud Platform Engineering (AWS / Azure / GCP)

  • Architect, implement, and maintain cloud infrastructure across AWS, Azure, and GCP using Terraform (IaC).
  • Design and implement cloud landing zones aligned with best practices:Account/subscription/project structure, environment separation, identity boundaries Baseline guardrails and policy enforcement (Azure Policy, AWS Organizations/SCPs, GCP Org Policies) Centralized audit logging, monitoring, and cost allocation standards
  • Build and operate cloud-native virtual network constructs (cloud-focused only):Azure: VNETs, subnets, NSGs, route tables, Private Endpoints, hub/spoke patterns. AWS: VPCs, subnets, security groups, NACLs, route tables, VPC endpoints/PrivateLink, multi-account connectivity patterns. GCP: VPC networks, subnets, firewall rules, routes, Private Service Connect, Shared VPC patterns.
  • Implement private-by-default service access patterns (private endpoints, controlled egress, service-to-service access controls).

Compute, Virtual Machines, and Containers

  • Configure, deploy, and maintain virtual machines and scalable compute patterns:AWS EC2 (Launch Templates, Auto Scaling Groups) Azure Virtual Machines / VM Scale Sets GCP Compute Engine / Managed Instance Groups
  • Own OS hardening, baseline configuration, patching strategies, and instance bootstrapping (cloud-init, image pipelines).
  • Deploy and operate containerized workloads using Kubernetes:EKS / AKS / GKE (cluster design, upgrades, node pools, RBAC, scaling) Container registries (ECR / ACR / Artifact Registry) and artifact promotion strategies
  • Implement workload delivery patterns (Helm/Kustomize), rollout strategies (blue/green, canary), and safe rollbacks.

Infrastructure as Code, Automation & CI/CD (Terraform)

  • Build reusable, versioned Terraform modules with standards for naming, tagging/labels, and secure defaults.
  • Implement Terraform best practices: remote state, locking, environment isolation, secrets handling, and drift detection.
  • Integrate IaC into CI/CD pipelines (e.g., GitHub Actions, Azure DevOps, GitLab CI):Automated validation, linting, security scanning, plan/apply workflows, approvals, and promotions
  • Implement policy-as-code guardrails (OPA/Conftest, Sentinel where applicable) to prevent unsafe changes.

SRE: Reliability Engineering, Observability & Operational Excellence

  • Define, implement, and improve SLIs/SLOs (availability, latency, error rates, saturation) for critical services and platforms.
  • Manage and enforce error budgets to balance reliability with delivery velocity.
  • Establish and continuously improve observability standards:Metrics, logs, traces, dashboards, and alerting across cloud services and Kubernetes Tooling such as CloudWatch, Azure Monitor/Log Analytics, GCP Cloud Monitoring/Logging, OpenTelemetry, Prometheus/Grafana (where used)
  • Improve incident detection quality by reducing alert noise, implementing actionable alerts, and creating clear escalation paths.
  • Drive reliability improvements through:Capacity planning, performance tuning, load testing support Resilience engineering (multi-zone design, graceful degradation, retries/timeouts, backpressure) Continuous automation to eliminate toil (self-healing, auto-remediation runbooks, ChatOps where applicable)

Production Support, Incident Response & Escalations

  • Provide specialized support for high-stakes production deployments (major releases, platform cutovers, migrations).
  • Lead incident response: triage, mitigation, recovery, communication, and post-incident review (PIR/RCA).
  • Troubleshoot escalations across cloud services, Kubernetes, IAM, storage, and CI/CD pipelines using evidence-driven debugging.
  • Build and maintain runbooks, operational playbooks, and postmortem action tracking to prevent repeat incidents.
  • Participate in on-call rotation and continuously improve on-call health through automation and better observability.

Security, Identity, and Governance

  • Implement least-privilege access controls across AWS/Azure/GCP (IAM/RBAC), including role design and permission boundaries.
  • Enforce secure configurations: encryption at rest/in transit, secrets management, key management (KMS/Key Vault/Cloud KMS).
  • Implement compliance-oriented logging and auditing, and partner with security teams to remediate findings and harden platforms.

Required Skills & Experience

  • 10+ years in cloud engineering, platform engineering, DevOps, or SRE roles with significant production ownership.
  • Strong hands-on experience across AWS and Azure, plus practical experience in GCP (production exposure preferred).
  • Expert-level Terraform (modules, state, CI integration, scalable environment patterns).
  • Strong Kubernetes operations experience (EKS/AKS/GKE), including upgrades, scaling, and workload reliability.
  • Experience implementing SRE practices: SLIs/SLOs, alerting strategies, incident response, postmortems, and automation/toil reduction.
  • Strong Linux and scripting (Bash/Python) and ability to debug systems from symptoms to root cause.
  • Strong security fundamentals: IAM/RBAC, encryption, secrets, and auditability in cloud environments.
  • Proven ability to lead technical escalations and coordinate resolution across teams.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices​ into your browser.

Expected base pay rates for the role will be between $150,000 and $210,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ms's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ms's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ms's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.