Cloud SME Onsite

• The Cloud SME is the goto expertfor AWS and Azure cloud platforms.

• This role designs, reviews, and supports cloud solutions to make sure they are secure, reliable, costeffective, and compliant. The SME guides teams, supports projects, resolves complex issues, and advises leadership and customers on cloud best practices., * Design and review AWS and Azurecloud architectures (IaaS, PaaS, limited SaaS).

• Ensure solutions follow best practicesfor security, scalability, high availability, and DR.
• Support hybrid and multicloud
• Define standard architectures, templates, and guardrails.

1. Cloud Operations & Support

• Act as Level3 / SME escalationfor AWS and Azure issues.
• Troubleshoot complex issues related to:

Compute (EC2, Azure VMs)

Storage (S3, EBS, Azure Blob, Disk)

Networking (VPC, VNets, VPN, Load Balancers)

Identity & Access (IAM, Azure AD)

• Support 24x7 operations model(oncall or advisory).

1. Security & Compliance

• Enforce leastprivilege access, IAM best practices, and RBAC.
• Implement and review:

Network security (NSG, Security Groups, NACLs)

Encryption, Key Management (KMS, Key Vault)

Logging and monitoring (CloudTrail, Azure Monitor)

• Support compliance, audits, and security reviews.

1. Automation & Infrastructure as Code

• Drive automation using:
• Terraform / CloudFormation / ARM / Bicep
• Standardize repeatable buildsand reduce manual work.
• Integrate cloud automation with CI/CD pipelines.

1. Cost Management & Optimization

• Monitor cloud spend and optimize costs using:
• Budgets, alerts, tagging, and chargeback/showback models
• Identify unused or oversized resources and recommend savings.

1. Cloud Migration & Modernization

• Support cloud migration strategies:

Liftandshift

Replatform

Refactor

• Advise on application modernization, containers, and cloudnative services.

1. Stakeholder & Team Enablement

• Act as technical advisorfor:

Project Managers

Delivery teams

Customers

• Review designs, provide approvals, and mentor engineers.
• Create documentation, SOPs, and runbooks.

Technical Skills

• AWS Services: EC2, S3, IAM, VPC, RDS, CloudWatch, Route53, Lambda (basic)
• Azure Services: Azure VMs, VNets, Azure AD, Storage, Azure Monitor, Key Vault
• Strong understanding of:

Networking

Security

Backup & DR

Monitoring & logging

• Handson experience with Terraform or equivalent IaC tools