Job Responsibilities
Cloud Infrastructure Management
Landing Zone Design Architecture
• Develop end - to - end Landing Zone designs on Aliyun, meticulously considering theganizations business requirements, security policies, compliance regulations. This involves defining the overall structure, intricate network topologies, efficient resource allocation within the Landing Zone. Fexample, determining the optimal placement of different types of workloads across various sub - networks in a VPC to enhance performance security.
• detailed blueprints fthe deployment of essential Aliyun services such as virtual machines (ECS - Elastic Compute Service), storage systems (OSS - Object Storage Service, ApsaraDB fRDS - Relational Database Service), network configurations (VPC - Virtual Private Cloud) within the Landing Zone. Ensure proper segmentation, isolation, seamless connectivity between different components. You will need to design security - focused network segmentation, like separating public - facing applications from sensitive data storage.
• Collaborate closely with internal security teams to design implement robust security controls within the Landing Zone. This includes configuring security groups, setting up access control lists, implementing encryption mechanisms. Ensure strict compliance with industry - standard security frameworks such as CIS (Center fInternet Security) benchmarks fcloud internal security policies. Participate in internal security audits to validate the effectiveness of the implemented controls.
• Alibaba Cloud Deployment Configuration
• Lead the deployment configuration of Alibaba Cloud - based infrastructure. This includes setting up Elastic Compute Service (ECS) instances, Object Storage Service (OSS) buckets, Virtual Private Cloud (VPC) networks according to the companys business requirements. Fexample, configure a VPC with multiple sub - nets fdifferent business units, ensuring secure efficient communication between resources.
• Provision manage cloud resources, such as Elastic Block Storage (EBS) fdata storage load balancers to distribute traffic across ECS instances. Optimize resource allocation to balance performance cost, finstance, choosing the appropriate ECS instance types based on application workloads.
• AWS (Optional) Infrastructure Support
• If required, provide support fAWS - based infrastructure. This may involve managing Amazon Elastic Compute Cloud (EC2) instances, Amazon Simple Storage Service (S3) buckets, Amazon Virtual Private Cloud (VPC). Collaborate with the team to ensure seamless integration of AWS resources with the existing Alibaba Cloud - centered infrastructure when applicable.
Cloud Platform Monitoring Optimization
• Performance Monitoring
• Implement a comprehensive monitoring system fthe cloud platforms. Use Alibaba Clouds monitoring tools like CloudMonitto track key performance indicators (KPIs) of cloud resources, such as CPU utilization, memory usage, network traffic, disk I/O. Set up real - time alerts fany abnormal behavior, fexample, if the CPU utilization of an ECS instance exceeds 80% fa consecutive 15 minutes.
• Analyze monitoring data to identify performance bottlenecks. Based on the analysis, optimize cloud resources. This could involve adjusting the number of ECS instances in a cluster, upgrading the hardware specifications of an instance, fine - tuning network settings to improve data transfer speeds.
• Cost Optimization
• Regularly review cloud resource usage costs. Use Alibaba Clouds cost management tools to identify areas of over - spending. Fexample, detect under - utilized ECS instances either downsize them terminate them if they are no longer needed. Implement cost - saving strategies such as using Reserved Instances flong - term workloads in Alibaba Cloud.
• In the case of AWS (if applicable), apply similar cost - optimization techniques, like using Amazon EC2 Spot Instances fnon - critical workloads to reduce costs.
Cloud Security Compliance
• Security Management
• Ensure the security of cloud platforms. Implement security best practices in Alibaba Cloud, such as configuring security groups to control inbound outbound traffic, enabling data encryption fOSS buckets, setting up multi - factauthentication fcloud account access.
• Monitfsecurity threats vulnerabilities. Use Alibaba Clouds security services like Antimalware Service to detect mitigate potential security risks. In case of any security incidents, lead the incident response process, including containment, investigation, recovery.
• Compliance Adherence
• Ensure that the cloud infrastructure complies with relevant industry regulations internal policies. In the context of Alibaba Cloud, this may involve compliance with regulations such as GDPR (if applicable finternational data handling) industry - specific security standards. Maintain proper documentation of security compliance measures fauditing purposes.
Technical Support Team Collaboration
• Internal Support
• Provide technical support to internal teams regarding cloud - related issues. Assist developers in troubleshooting cloud - based application deployment problems, fexample, helping them resolve issues related to containerchestration in Alibaba Clouds Container Service fKubernetes (ACK).
• Collaborate with other IT teams, such as network engineers data center operations teams, to ensure smooth operation of the overall IT infrastructure. Work closely with the security team to enforce cloud security policies.
• External Collaboration
• Liaise with Alibaba Clouds technical support team when necessary. Participate in joint problem - solving sessions fcomplex cloud - related issues. Keep updated on the latest features improvements in Alibaba Cloud services communicate relevant information to the internal team.
• If involved with AWS, engage with Amazon Web Services support as needed to address AWS - specific technical challenges.
2. Requirements
Education Experience
• A bachelors degree in Computer Science, Information Technology, a related field. A masters degree is a plus.
• At least 5 years of experience in cloud operations, with a minimum of 3 years of hands - on experience in managing Alibaba Cloud infrastructure. Experience with AWS is considered an advantage but not mandatory.
Technical Skills
• Alibaba Cloud Proficiency
• In - depth knowledge of Alibaba Cloud services, including ECS, OSS, VPC, ACK, CloudMonitor. Ability to design implement complex cloud architectures using these services.
• Proficient in programming languages such as Python, Java, Shell scripting. Experience with cloud - related development frameworks tools, especially those related to infrastructure as code (e.g., Terraform, Ansible) fLanding Zone deployment. Be able to write scripts to automate the deployment configuration of Landing Zone resources.
• Strong understanding of cloud security mechanisms in Alibaba Cloud, such as security groups, data encryption, identity access management.
• Familiarity with Alibaba Clouds cost management tools techniques foptimizing cloud spending.
• AWS (Optional) Knowledge
• If applicable, knowledge of AWS services like EC2, S3, VPC, Amazon Elastic Kubernetes Service (EKS). Experience in migrating integrating AWS resources with Alibaba Cloud infrastructure is a plus.
• General Cloud Skills
• Proficiency in containerization technologies like Docker containerchestration platforms such as Kubernetes, especially in the context of cloud deployment.
• Knowledge of network concepts, including IP addressing, routing, network security, which are crucial fmanaging cloud - based networks in both Alibaba Cloud potentially AWS.
Soft Skills
• Strong problem - solving analytical skills, with the ability to quickly diagnose resolve complex cloud - related issues.
• Excellent communication skills, both verbal written, to effectively communicate with internal teams, external vendors, management.
3. Preferred Qualifications
Certifications
• Alibaba Cloud certifications, such as Alibaba Cloud Certified Professional - Cloud Architect Alibaba Cloud Certified Professional - Cloud Operation Engineer, are highly preferred.
• AWS certifications, such as AWS Certified Solutions Architect - Associate AWS Certified DevOps Engineer - Professional, are an added advantage if AWS experience is part of the job scope.
Industry Knowledge
• In - depth knowledge of manufacturing processes, such as production planning, supply chain management, quality control, lean manufacturing principles. This knowledge helps in better understanding manufacturing data developing more relevant data solutions.