Technology

Cloud Engineer

APA Life Assurance Company Ltd·Nairobi, kenya·Full Time·Hybrid
TechnologyFull TimeHybrid
-Closes Nov 12, 2026

KEY PRIMARY RESPONSIBILITIES

Cloud Infrastructure Engineering

  • Design, implement, and manage cloud infrastructure solutions, ensuring scalability, reliability, and alignment with organisational architecture and standards.
  • Apply technical standards aligned to the approved cloud strategy and advise management on the technical impact of business and architectural decisions.
  • Provide expert technical input to functional plans and support the delivery of strategic initiatives within a 6 - 12 month planning horizon.

Cloud Operations, Automation and Performance

  • Support the deployment and operation of applications in cloud environments, including automation, monitoring, and performance optimisation.
  • Collaborate with engineering and infrastructure teams to support cloud integration, DevOps practices, and continuous delivery (CI/CD) pipelines.
  • Monitor cloud performance and usage, identifying opportunities for optimisation, cost reduction, and improved system resilience.
  • Resolve complex or escalated technical matters and support service improvement through analysis and recommendations.

Cloud Security, Governance and Cost Management

  • Implement cloud security, governance, and cost management practices to ensure compliance, efficiency, and risk mitigation.
  • Ensure technical work complies with organisational policies and regulatory requirements, and support audit and regulatory reviews when required.
  • Identify and report technical risks, control gaps, trends, or anomalies, escalating matters beyond technical authority to management.
  • Exercise sound judgement on decisions within the area of responsibility that affect cloud spend, resources, and service availability.

Reporting and Documentation

  • Prepare accurate technical reports and analysis, and contribute technical input to functional reporting.
  • Maintain accurate documentation of cloud architectures, configurations, methods, and decisions.

Stakeholder Engagement and Technical Leadership

  • Engage internal stakeholders (Application Development / DevOps, Digital & IT leadership, Information Security) and external partners (cloud service providers, third-party vendors, managed service providers, and systems integrators) on technical matters within delegated authority.
  • Communicate complex technical information clearly and simply to management and non-technical stakeholders.
  • Provide technical guidance, mentoring, and knowledge-sharing within the function, and coordinate project work where required without formal people-management authority.
  • Promote high professional, technical, and ethical standards, and attend training as required and agreed.

ACADEMIC QUALIFICATIONS

Bachelor's degree is essential; a degree in Computer Science, Information Technology, Engineering, or a related technical field is an added advantage.

JOB SKILLS AND REQUIREMENTS

  • Cloud Platform Engineering Expertise in designing, building, and operating secure, scalable workloads on major public cloud platforms.
  • Infrastructure as Code and Automation Ability to provision and manage infrastructure through code, scripting, and automated workflows.
  • Cloud Security and Governance Sound knowledge of cloud security controls, identity and access management, policy enforcement, and cost governance.
  • DevOps and CI/CD Experience building and supporting deployment pipelines and DevOps practices that enable continuous delivery.
  • Networking and Systems Integration Understanding cloud and hybrid networking, connectivity, and integration with on-premises and third-party systems.
  • Monitoring, Performance and Resilience Ability to implement observability, tune performance, and design for availability and recovery.
  • Technical Leadership and Expertise Acts as a trusted technical authority and raises engineering standards across the team.
  • Problem Solving and Analytical Thinking Diagnoses complex technical issues and develops practical, sustainable solutions.
  • Collaboration and Influencing Works across functions and with external partners to align on standards and outcomes.
  • Communication Explains complex technical matters clearly to technical and non-technical audiences.
  • Drive for Results and Accountability Takes ownership of outcomes and delivers reliable results within agreed timelines.
  • Demonstrable proficiency in leveraging AI tools and emerging technologies to enhance infrastructure automation, cloud operations, and decision-making.

PROFESSIONAL QUALIFICATIONS

Any related professional qualification will be an added advantage.

EXPERIENCE

  • Minimum of 3 - 5 years of specialist practice in cloud engineering or related discipline.
  • 3 - 5 years of experience applying regulatory, technical, or analytical frameworks in an operational environment.
  • Advanced computer literacy.

Key skills

BA/BSc/HND

At a glance

Company

APA Life Assurance Company Ltd

Location

Nairobi, kenya

Employment

Full Time

Experience

Valid until

November 12, 2026

Created

November 5, 2026

More opportunities

Similar roles you might like

Senior Devsecops Engineer

Tana

Nairobi, kenya

full-time

Position Overview We are hiring a Senior DevSecOps Engineer to own cloud infrastructure, CI/CD pipelines and security for a commercial real estate software company. Its platform helps companies manage property leases, documents, key dates, tasks and lease accounting compliance. Azure is the primary cloud platform, with AWS also part of the environment. The priority is a strong DevSecOps engineer on the Microsoft stack who can work independently, identify risks proactively and learn unfamiliar tools and services. Responsibilities Build and manage cloud infrastructure on Azure and AWS, defined as code using Terraform. Set up and maintain Azure DevOps CI/CD pipelines for building, testing and deploying the platform. Apply security best practices across cloud and on-premises systems, including access control, vulnerability management, patching and compliance. Use Microsoft Defender for Cloud, Endpoint and Identity to monitor and respond to security issues. Set up logging, metrics and alerting to provide visibility into production systems. Administer Windows and Linux servers, including patching, hardening and maintaining availability. Automate repetitive work using PowerShell, Bash or Python. As a secondary responsibility, support Microsoft 365 and Entra ID administration, including users, groups, access and MFA; support device management through Intune; and handle IT escalations when needed. Requirements 5+ years of experience in DevOps or cloud engineering roles. Strong hands-on Azure experience, including building and operating production infrastructure and working with core services across compute, networking, identity, storage and Key Vault. Some hands-on AWS experience in addition to Azure. Azure is the primary platform, but AWS exposure is required. Infrastructure-as-code experience with Terraform or a similar tool, such as Bicep or CloudFormation. Experience building or maintaining CI/CD pipelines, ideally in Azure DevOps. GitHub Actions or similar experience is acceptable. Knowledge of cloud and DevOps security best practices, including identity and access management, secrets management, network security and vulnerability management. Good general working knowledge of both Windows and Linux servers, with confidence administering both. Scripting experience in PowerShell, Bash or Python. Experience with monitoring and observability, including logging, metrics and alerting, using tools such as Azure Monitor or Application Insights. Ability to take ownership of a problem and work independently without close supervision. A proactive approach to identifying and raising infrastructure or security risks before they become incidents. Ability to learn new tools and services, including working independently from documentation. Nice to have Microsoft 365 administration, including Exchange Online, SharePoint, Teams and licensing. Entra ID administration, including groups, conditional access and MFA. Device management with Intune. Experience with Microsoft Defender for Cloud, Endpoint or Identity. Azure Landing Zones or Cloud Adoption Framework experience. PBX/VoIP telephony administration. Helpdesk or IT support experience. Azure, AWS or security certifications.

6 days ago