Sr. Cloud Platform Engineer

The Cloud Platform Engineer will build, automate, secure, and operate cloud-based platform solutions across multiple cloud platforms — GCP, Azure, and AWS, with GCP and Azure as the preferred focus. This role requires a strong, practical understanding of cloud security, identity and access management, networking, and secure-by-design principles, in addition to IaaS and PaaS best practices.

Responsibilities:

Build scalable, resilient, and secure cloud platforms on IaaS/PaaS across GCP, Azure, and AWS (focus on GCP and Azure).

Execute cloud migrations — re-host, re-platform, refactor, and re-architect — with automation and security posture improvement.

Drive application and infrastructure modernization for scalability, performance, and efficiency.

Partner with engineering and security teams to implement reference architectures, reusable modules, and security guardrails.

Optimize infrastructure for performance, reliability, security hardening, and cost efficiency.

Implement and maintain cloud security controls and governance guardrails aligned with industry standards.

Build secure cloud networking, including VPN, Cloud Interconnect, ExpressRoute, and Direct Connect.

Configure network segmentation, micro-segmentation, and zero-trust controls.

Secure and operate containers, Kubernetes (GKE/AKS/EKS), serverless, and microservices

Develop Infrastructure as Code with Terraform (primary), plus Azure Bicep/ARM, Google Config Connector, and AWS CloudFormation.

Build DevSecOps CI/CD pipelines with integrated security scanning, policy enforcement, and compliance validation.

Implement observability — logging, monitoring, alerting, and incident response integration.

Evaluate emerging cloud and automation technologies to improve reliability, security, and resilience.

Create platform documentation, runbooks, and architecture/security diagrams.

Support cloud operating models: FinOps, tagging standards, and resource governance

Minimum Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or related field of study.
• Eight (8) years of hands-on cloud platform engineering or infrastructure experience, including ownership and operation of secure production environments.
• Proficient in at least one major cloud platform — GCP or Azure preferred, with AWS in scope — and strong cross-cloud fundamentals.
• Solid, practical understanding of cloud networking, cloud security, containers, Kubernetes, serverless technologies, and microservices.
• Hands-on experience with cloud security controls, including IAM, encryption, key management, network security, and zero-trust principles.
• Working knowledge of cloud governance, monitoring, observability, FinOps, and cost management.
• Demonstrated experience embedding security into IaC and CI/CD pipelines (DevSecOps).
• Strong communication and collaboration skills, with the ability to work effectively across engineering, platform, and security teams.

About KLA

We provide advanced inspection tools, metrology systems, process solutions, and computational analytics that make electronics possible, tackling complex challenges. From electron and photon optics to machine learning and data analytics, we seek perfection at the most fundamental level of matter in the universe. If you want to make electronics that push industries forward and make the world a better place, join us.

Total Rewards

Base Pay Range: $137,800.00 - $202,133.00 Annually
Primary Location: USA-CA-Milpitas-KLA

KLA’s total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave.

Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.

Use of AI Statement

At KLA, our interviews seek to understand your individual skills, problem-solving approach and authentic thinking. To ensure a fair and consistent evaluation, the use of AI, recording tools or other technologies to generate, suggest or provide responses during interviews—whether virtual or in person—is not permitted unless explicitly approved in advance as part of a reasonable accommodation or invited by the interviewer. Use of these tools may interfere with our ability to evaluate your individual qualifications and affect your candidacy. KLA is committed to advancing innovation through responsible AI, and we value candidates who share this mindset.

Equal Opportunity Statement

KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at talent.acquisition@kla.com or at +1-408-352-2808 to request accommodation.

For additional information, view the US Know Your Rights poster on the U.S. Equal Employment Opportunity Commission website.