Cloud Engineer

Title: Cloud Engineer Reporting to: Head of Engineering Remuneration: Up to £80,000 FTE Expected Hours: 40 hours/week Location: Home-based The Company We are a leading UK online psychiatry service, providing assessment, diagnosis and treatment for a range of mental health conditions. Our mission is to rise to the challenge of helping solve the UK’s mental health crisis. Powered by our intelligent, AI-enabled platform, we provide consultant-led psychiatric care for the whole family, specialising in ADHD and Autism. Job Summary The Cloud Engineer plays an important role in supporting, maintaining and improving our AWS cloud platform, ensuring it remains secure, reliable, performant and cost-effective. Working closely with the wider Engineering, Cyber Security and Information Governance teams, they will help maintain the infrastructure that underpins our digital healthcare services, supporting the clinicians, operational teams and patients who depend on them. This is a hands-on technical role, with a focus on the day-to-day operation, maintenance and continuous improvement of our cloud environment. The Cloud Engineer will contribute to infrastructure automation, platform reliability, monitoring and security, whilst supporting engineering teams in delivering and maintaining dependable digital services. The role will be part of a collaborative engineering environment, contributing technical expertise, sharing knowledge and supporting the ongoing development of our cloud capabilities. Description of Duties Support the day-to-day operation, maintenance and performance of our AWS cloud infrastructure, ensuring services remain secure, available and reliable. Maintain and troubleshoot containerised workloads using AWS ECS/Fargate, including service health checks, scaling, deployments and rollback. Support the configuration and maintenance of AWS networking services, including VPCs, Route 53, load balancing, CloudFront and TLS certificates. Develop, maintain and update infrastructure as code using Terraform, ensuring cloud environments remain consistent, reproducible and version-controlled. Support the operation of our multi-account AWS environment, including access management, environment separation, logging and established security controls. Monitor platform performance, availability and reliability, investigating and resolving infrastructure issues and contributing to incident reviews. Assist with backup, disaster recovery and business continuity activities, including backup verification and recovery testing. Maintain and improve CI/CD pipelines using GitHub Actions, supporting efficient and reliable application deployments. Support cloud monitoring and observability using Datadog, including metrics, logs, traces and alerting. Apply cloud security best practices, including IAM permissions, network security, encryption and secure secrets management. Work collaboratively with Cyber Security and Information Governance colleagues to support compliance requirements, including DSPT and Cyber Essentials. Support vulnerability remediation and security improvements across cloud infrastructure and deployment pipelines. Monitor AWS resource utilisation and contribute to cost optimisation activities, identifying opportunities to improve efficiency. Develop and maintain technical documentation, operational procedures and infrastructure configuration records. Collaborate with software engineers and other technical colleagues to troubleshoot infrastructure issues and support platform improvements. Contribute to continuous improvement initiatives, identifying opportunities to automate routine tasks and improve platform efficiency. Participate in operational support and on-call arrangements as required. Person Specification Essential Qualifications and Skills Proven hands-on experience in cloud infrastructure or platform engineering, ideally within an AWS environment. Practical experience supporting and maintaining production workloads hosted on AWS. Experience using Terraform or similar infrastructure-as-code tooling to manage cloud infrastructure. Working knowledge of AWS services, including ECS/Fargate, EC2, VPC, IAM, Route 53 and load balancing. Experience working with containerised applications and Docker. Understanding of cloud networking principles, including DNS, routing, load balancing and network security. Experience supporting CI/CD pipelines, ideally using GitHub Actions. Familiarity with cloud monitoring, logging and alerting tools, such as Datadog or AWS CloudWatch. Understanding of cloud security principles, including access management, encryption and secure configuration. Experience investigating and resolving infrastructure issues within production environments. Knowledge of backup, recovery and infrastructure resilience principles. Experience using scripting or automation tools, such as Python or Bash. Familiarity with Git and version-controlled development practices. Desirable Experience and Skills Experience working within regulated environments, ideally healthcare or NHS digital services. Familiarity with DSPT, Cyber Essentials or Cyber Essentials Plus requirements. Relevant AWS certifications, such as AWS Certified Solutions Architect – Associate, SysOps Administrator – Associate or Developer – Associate. Experience supporting multi-account AWS environments. Experience with relational databases hosted in AWS, including RDS, MySQL or PostgreSQL. Exposure to cloud cost optimisation and resource management. Experience supporting infrastructure migrations or cloud platform improvements. Familiarity with security scanning tools and vulnerability management processes. Exposure to disaster recovery testing and incident management procedures. Other Information This job description is intended as an outline indicator of general areas of activity and will be amended in the light of the changing needs of the Company. You may be required to work at other locations as determined by the duties of your post. You may be required to undertake any other duties at the request of the Line Manager, which are commensurate with the role, including project work, internal job rotation and absence cover. This job description describes responsibilities as they are currently required. It is anticipated duties will change over time and the job description may need to be reviewed in the future. Behaviour In the course of providing the Services, the employee is expected to: Support the values, aims and vision of the Company and its clients Act with honesty and integrity at all times Be positive ambassadors for the Company Demonstrate high standards of personal conduct Value and respect colleagues, other members of staff and patients Work with others to develop and improve the Company’s services Take personal responsibility for their words and deeds and for the quality of the service they deliver Confidentiality The post holder must ensure that personal information is accurate, up to date, always kept secure and confidential in compliance with relevant legislation and the common law duty of confidentiality. The post holder must follow record-keeping guidelines to ensure compliance with the Freedom of Information Act. Valuing Diversity & Human Rights No person should receive less favourable treatment on the grounds of sex, sexual orientation, marital/partnership status, race, religion, age, creed, colour, ethnic origin, disability, part time working status and real or suspected HIV/AIDS status and must not be placed at a disadvantage by conditions or requirements which cannot be shown to be justifiable. Data Protection If you have contact with computerised data systems you are required to obtain, process, and/or use information held on a computer in a fair and lawful way, to hold data only for the specific registered purpose and not to use or disclose it in any way incompatible with such purpose. To disclose data only to authorised persons or organ