Senior Cloud Engineer

Role Overview

• Own the architecture and operation of cloud infrastructure supporting latency-sensitive trading systems across all desks.
• Design VPC and network topologies with explicit routing, isolation, and traffic control; partner with the network team to build a robust, highly available, and latency-optimized global network, including Direct Connect to DV office locations and hybrid connectivity across cloud providers (Cloud Interconnect, VPN, Transit Gateway).
• Define compute placement strategies, including cluster placement groups and locality-aware scheduling.
• Build and maintain shared platform capabilities that enable engineering teams across the firm to self-serve reliably and safely.
• Own FinOps visibility and cost optimization frameworks across all trading and research workloads.
• Serve as the primary escalation point for cloud infrastructure incidents firm-wide, owning issues from detection through resolution.
• Define firm-wide observability standards and own the cloud layer of the monitoring and alerting stack.
• Mentor engineers and establish infrastructure standards that raise the engineering bar across teams.
• Lead infrastructure planning and execution for the migration of CME colocation workloads to GCP, maintaining continuity of latency-sensitive trading operations throughout.
• Design hybrid connectivity between colocation environments and GCP (Cloud Interconnect, Cloud VPN).
• Architect GCP VPC topology, IAM, and Organization Policy to mirror the security posture enforced on AWS.
• Define GCP compute strategy (Compute Engine, GKE, sole-tenant nodes) with trading-appropriate placement and locality considerations.
• Extend Terraform IaC standards to GCP; establish cross-cloud observability using Cloud Monitoring, Cloud Logging, and Cloud Trace.
• Design secure, low-latency connectivity to cryptocurrency exchanges via private peering or dedicated API gateways.
• Build DDoS-resilient perimeter for crypto-facing infrastructure and enforce strict network segmentation from other trading desks.
• Establish WebSocket connection management infrastructure for real-time market data feeds with redundant failover and feed health observability.

Requirements

• At least 5+ years of experience in a similar role in the industry
• Extensive hands-on experience with both AWS and GCP in performance-sensitive environments
• Deep, hands-on expertise in cloud networking: VPC design, hybrid connectivity, routing, and traffic control across AWS and GCP
• Extensive experience with Terraform at scale
• Direct experience supporting electronic trading or low-latency systems
• Demonstrated ability to build shared platform capabilities and drive adoption across engineering teams
• GCP & Cloud Migration
• Experience migrating latency-sensitive workloads to GCP; familiarity with Compute Engine, GKE, and sole-tenant nodes
• Working knowledge of GCP IAM, Organization Policies, and multi-project governance
• Understanding of multi-cloud networking patterns and cross-cloud security posture management
• Familiarity with exchange API security models, crypto key custody patterns, and WebSocket-based market data infrastructure
• Awareness of crypto-specific threat landscape: API key theft, BGP hijacking, and chain reorganization events.

Tech Stack

• AWS
• Cloud
• Google Cloud Platform
• Terraform

Benefits

• Discretionary bonus eligibility
• Medical, dental, and vision insurance
• HSA, FSA, and Dependent Care Options
• Employer Paid Group Term Life and AD&D insurance
• Voluntary LTD, Life & AD&D insurance
• Flexible Vacation policy
• Retirement plan with employer match
• Paid Parental Leave
• Wellness Programs