高级云工程师 上海

Job description

About the Role We are building a new cloud landing zone on Tencent Cloud (Domestic China) within a GxP-regulated environment. As a Cloud Infrastructure DevOps Engineer, you are the hands-on expert who builds, automates, and operates our cloud infrastructure day-to-day. You own the CI/CD pipelines, ensure platform reliability, and drive operational excellence through automation and observability. You will be part of a global team responsible for multi-cloud infrastructure across AWS, GCP, and Azure, while your primary focus will be the Tencent Cloud platform in China. What You'll Do ● Build and maintain the Tencent Cloud landing zone infrastructure using Infrastructure as Code – no manual changes, ever ● Deploy, operate, and troubleshoot TKE clusters (Tencent Kubernetes Engine) including networking, ingress controllers, service mesh, RBAC, pod security, scaling, and monitoring ● Own CI/CD pipelines for infrastructure deployment using GitHub Actions and GitOps workflows ● Automate everything – provisioning, configuration, testing, compliance checks, and drift detection ● Monitor and respond to infrastructure incidents, ensuring high availability and rapid resolution ● Collaborate with the Infrastructure Architect to implement designs and provide operational feedback ● Implement and maintain network security controls: firewall rules, security groups, WAF configurations, VPN/SD-WAN connectivity ● Leverage AI-powered tooling at the infrastructure level to improve automation, monitoring, alerting, and incident response ● Act as Qualification Owner for infrastructure components in the GxP-regulated environment ● Participate in on-call rotations covering the global multi-cloud environment (AWS, GCP, Azure) What You Bring Must Have ● 5+ years of experience in cloud infrastructure engineering / DevOps (Level 3 / Senior) ● Deep hands-on expertise in Tencent Cloud services (VPC, CCN, CVM, CLB, COS, Security Groups, Cloud Firewall) ● In-depth knowledge of TKE (Tencent Kubernetes Engine) – cluster operations, CNI networking, troubleshooting, scaling, monitoring, and upgrades ● Strong experience with Infrastructure as Code (Terraform) – writing, testing, and maintaining modules ● Expert-level proficiency with GitHub (Actions, workflows, branch strategies) and GitOps practices ● Hands-on experience with CI/CD pipeline design for infrastructure (testing, validation, promotion across environments) ● Experience with network security operations: firewall management, segmentation, traffic inspection ● Understanding of GxP/regulated environments and willingness to take on the role of Qualification Owner ● Automation-first mindset – you actively eliminate manual toil and build self-healing systems ● Basic knowledge in scripting, e.g. bash, Python or PowerShell ● Experience with at least one additional cloud platform: AWS, GCP, or Azure ● Strong troubleshooting and incident response skills ● Willingness to participate in global on-call rotations ● Fluent in English (written and spoken) – our team language is English ● Professional-Level Certificate (e.g. AWS Certified Solutions Architect – Associate/Professional; Tencent Cloud Certified Professional – Solutions Architect) Nice to Have ● Experience with PaloAlto firewalls ● Knowledge of Tencent EdgeOne or Tencent WAF ● Familiarity with SD-WAN solutions ● Experience with observability stacks (Prometheus, Grafana, Loki, or Tencent Cloud Monitor) ● Experience with AI/ML tools for operations (AIOps, intelligent alerting, Copilot for IaC, automated remediation) ● Container security tools ● Experience with compliance frameworks (GxP, GAMP5) ● Mandarin language skills (beneficial for local vendor interactions) What We Offer ● Hybrid working model ● Work in a global, diverse team with colleagues across multiple regions ● Opportunity to build a greenfield landing zone from the ground up ● Access to cutting-edge AI tooling for infrastructure automation ● Career development in a regulated, enterprise-scale cloud environment ● Competitive compensation package