Principal Cloud Engineer

Who we’re looking for

We are seeking an experienced Principal Cloud Engineer with deep AWS expertise to join Enterprise Cloud Engineering. This role is focused on building, operating and securing an AI-first, agentic-native AWS cloud platform in a regulated enterprise environment. We are looking for someone with experience of AWS Landing Zones, a security-first mindset, and knowledge of building ‘paved roads’ that reduce friction for application teams and make it easier for developers to comply with policy requirements. Previous software engineering experience is a bonus.

You will be a hands-on engineer responsible for delivering platform capabilities and agent skills that enable developers and autonomous AI agents to develop, build, test, and deploy applications through to production. You will also build SRE capabilities covering release management, operational stability, monitoring, and incident and alert response.

About Us

Schroders is a global investment manager which provides active asset management, wealth management and investment solutions. We aim to provide excellent investment performance to clients through active management. We serve a diverse client base that includes pension schemes, insurance companies, sovereign wealth funds, endowments, foundations, high net worth individuals, family offices, as well as end clients through partnerships with distributors, financial advisers, and online platforms.

Established in 1804, we have around 5,500 people across 36 global locations. Schroders' success can be attributed to its diversified business model, spanning different asset classes, client types and geographies.

The base

We moved into our new HQ in the City of London in 2018. We’re close to our clients, in the heart of the UK’s financial centre and we have everything we need to work flexibly.

The team

You will be part of the Enterprise Cloud Engineering function, with a primary focus on AWS. The team builds and operates AWS Landing Zone foundations (including AWS Organizations, Control Tower, and AFT), security controls, and platform capabilities that enable developer agility while adhering to governance and compliance requirements. 

We build platform products using strong engineering discipline, including automated testing and well-governed software delivery practices.

What you'll do

• Design and deliver a development platform on AWS, enabling teams and autonomous agents to securely create, test, and deliver applications and infrastructure through standardised paved roads 
• Engineer and operate the AWS Landing Zone using AWS Organizations and Control Tower, including automated account vending via Account Factory for Terraform (AFT) and governance guardrails (e.g., SCPs). 
• Implement Terraform based Infrastructure as Code that is modular, reviewable, and suitable for AI assisted/agentic authoring. 
• Build and operate CI/CD pipelines using GitHub Actions/Workflows, embedding quality controls such as linting, static analysis, vulnerability scanning, and automated tests. 
• Define and implement test strategies for platform services and infrastructure code (e.g., unit testing for automation/services, policy tests, IaC validation, integration testing in ephemeral environments). 
• Implement preventative and detective security controls (e.g., AWS Config, Security Hub, policy as code, automated compliance scanning). 
• Develop and maintain Model Context Protocol (MCP) servers and reusable agent skills, contributing to an enterprise Agent Skills Marketplace with appropriate guardrails. 
• Design, build, and support AWS services including VPC networking, compute, storage, containers (ECS/EKS), and serverless (Lambda). 
• Develop Python based automation, services, and agent skills using Boto3 and AWS Lambda. 
• Perform Linux configuration, hardening, and troubleshooting in cloud environments. 
• Collaborate with security, platform, and application teams to improve reliability, security, and developer experience, treating the platform as a product. 

The knowledge, experience and qualifications you need

• Strong hands-on experience engineering AWS platforms in enterprise or regulated environments.  
• Familiarity with agentic AI development patterns and tools; experience with AWS Bedrock/Agent-Core and MCP is desirable. 
• Experience with policy as code tools (e.g., OPA, Cedar, Sentinel) and testing/validating policies is desirable. 
• Experience building developer platforms / paved roads / self-service platform products is highly desirable 
• Deep knowledge of AWS Landing Zones, including Organizations, Control Tower, AFT, account vending, audit, and compliance. 
• Strong Infrastructure as Code skills using Terraform (required); familiarity with AWS CDK and CloudFormation is a plus. 
• Experience with CI/CD and Git-Ops using GitHub Actions/Workflows, including approval gates for infrastructure change. 
• Strong AWS security experience across preventative/detective controls, monitoring/alerting, policy as code enforcement, and vulnerability management. 
• Proficient Python development (Boto3/Lambda), building automation and services that compose into larger workflows. 
• Strong Linux systems knowledge and troubleshooting skills. 
• Experience with AWS core services: networking (VPC), compute, storage, containers (ECS/EKS), serverless. 
• Demonstrable experience designing and implementing testing strategies, including automated unit/integration/end to end testing, and embedding these into CI/CD pipelines. 

What you’ll be like

• A pragmatic, hands-on, delivery-focused AWS platform engineer with a builder’s mindset. 
• Quality-minded: you default to reliable systems supported by automated tests and meaningful CI/CD quality gates. 
• An enabler: you enjoy building platform capabilities as products, with strong engineering discipline and attention to developer experience. 
• Security-focused with an automation-first mindset—security should be designed-in, not bolted on.
• Curious about agentic AI and actively experimenting with AI development tools and frameworks.
• Comfortable operating at platform scale in complex environments where “you ship it, you own it”. 
• Clear communicator who produces reviewable infrastructure code and durable documentation.

We Recognise Potential, Whoever You Are

Our purpose is to deliver excellent investment performance to clients through active management. We believe diverse perspectives and an inclusive culture help us make better decisions and achieve better outcomes for our clients. That's why inclusion is a strategic priority for us, and we are an equal opportunities employer. You are welcome here, regardless of your age, disability, gender identity, religious beliefs, sexual orientation, socio-economic background, or any other protected characteristic.

We will consider flexible working arrangements for all roles and provide reasonable accommodations to support applicants and employees, including those with neurodiversity, disability, or physical and mental health needs. For more information, please visit our FAQs.

Advertised Salary: Competitive