Cloud Engineer jobs: skills, pay and how to get hired
Updated 5 Nov 2026. Figures from the jobs in our search, not the whole market.
Contents
See open Cloud Engineer jobsScore your CV for these jobs
What a cloud engineer does
A cloud engineer sets up and looks after what a company runs at a cloud provider: the accounts and their guard rails, who may do what, the private networks and their links to the office, the servers, containers and managed services the developers use, and the backups, monitoring and bills that come with them. Most of it is written as code and changed through review, not clicked together in a console.
The title covers several jobs. In one company the cloud engineer builds the landing zone every team starts from; in another they move old systems out of a data centre; in a third they run the Kubernetes platform. Ads also say Cloud Infrastructure Engineer, Cloud Platform Engineer or name a provider, such as Azure Engineer. The steps up to cloud architect and head of cloud are in the career paths of this role.
The skills the ads ask for
We read a sample of the ads every day and count the skills they name. On a computer, hover a skill in the text to see its share; on a phone, the table has the same figures.
| Skill | Share of ads | What is expected |
|---|---|---|
| Azure | 47% | Subscriptions and management groups, Entra ID for identity, virtual networks, policies and the cost reports. depends on the provider |
| AWS | 52% | Accounts and organisations, identity and roles, networks, compute, storage and managed databases, and the bill. depends on the provider |
| Terraform | 40% | Write and review modules, keep state safe, plan before apply, and find drift between the code and the cloud. |
| Linux | 26% | Most cloud servers and containers run Linux: users, services, logs, disks and the network from the shell. |
| Kubernetes | 60% | Run workloads on a managed cluster: deployments, scaling, networking, secrets and upgrades of the cluster. |
| Docker | 33% | Build small, safe container images and know what runs inside them before they reach production. |
| CI/CD | 66% | Pipelines that test and roll out infrastructure changes the same way every time, with a review before apply. |
| Python | 27% | Scripts and small tools against the providers' APIs: reports, clean-ups, checks and glue for pipelines. |
| Git | 27% | All infrastructure code in version control, changed through reviewed merge requests, never by hand in the console. |
| Networking | 15% | Address ranges, subnets, routing, firewalls, private links, DNS and the link to the company's own sites. |
| Google Cloud | 25% | Projects and folders, identity and access, networks, compute and the managed services teams build on. depends on the provider |
| Cybersecurity | 14% | Identity first, least privilege, encryption, logging and quick patching; know the common cloud misconfigurations. |
| Ansible | 14% | Configure servers the same way every time from one reviewed playbook, where images alone are not enough. |
| English | 54% | The working language of the providers' documentation, support cases and most international cloud teams. |
| German | 60% | Asked for in most ads in Germany, Austria and Switzerland, where cloud teams work with business departments. |
Shares of the cloud engineer ads we read in the last 7 days, as of 5 Nov 2026. Our ads, not the whole market.
The provider comes first: most ads name one or two of AWSAsked in 52% of cloud engineer ads (as of 5 Nov 2026).Accounts and organisations, identity and roles, networks, compute, storage and managed databases, and the bill. depends on the provider, AzureAsked in 47% of cloud engineer ads (as of 5 Nov 2026).Subscriptions and management groups, Entra ID for identity, virtual networks, policies and the cost reports. depends on the provider and Google CloudAsked in 25% of cloud engineer ads (as of 5 Nov 2026).Projects and folders, identity and access, networks, compute and the managed services teams build on. depends on the provider, and the ideas behind them carry over from one to the next. Next comes infrastructure as code, mostly TerraformAsked in 40% of cloud engineer ads (as of 5 Nov 2026).Write and review modules, keep state safe, plan before apply, and find drift between the code and the cloud., with pipelines in CI/CDAsked in 66% of cloud engineer ads (as of 5 Nov 2026).Pipelines that test and roll out infrastructure changes the same way every time, with a review before apply. and everything kept in GitAsked in 27% of cloud engineer ads (as of 5 Nov 2026).All infrastructure code in version control, changed through reviewed merge requests, never by hand in the console.. Then the platform underneath: LinuxAsked in 26% of cloud engineer ads (as of 5 Nov 2026).Most cloud servers and containers run Linux: users, services, logs, disks and the network from the shell., networksAsked in 15% of cloud engineer ads (as of 5 Nov 2026).Address ranges, subnets, routing, firewalls, private links, DNS and the link to the company's own sites., containers with DockerAsked in 33% of cloud engineer ads (as of 5 Nov 2026).Build small, safe container images and know what runs inside them before they reach production. and KubernetesAsked in 60% of cloud engineer ads (as of 5 Nov 2026).Run workloads on a managed cluster: deployments, scaling, networking, secrets and upgrades of the cluster., and scripts in PythonAsked in 27% of cloud engineer ads (as of 5 Nov 2026).Scripts and small tools against the providers' APIs: reports, clean-ups, checks and glue for pipelines..
Security runs through all of it: identity and least privilege, encryption, logging and the common misconfigurationsAsked in 14% of cloud engineer ads (as of 5 Nov 2026).Identity first, least privilege, encryption, logging and quick patching; know the common cloud misconfigurations. attackers look for. Some ads add configuration tools such as AnsibleAsked in 14% of cloud engineer ads (as of 5 Nov 2026).Configure servers the same way every time from one reviewed playbook, where images alone are not enough. and monitoring with PrometheusAsked in 9% of cloud engineer ads (as of 5 Nov 2026).Collect metrics and alert on what users feel; often next to the providers' own monitoring tools.. EnglishAsked in 54% of cloud engineer ads (as of 5 Nov 2026).The working language of the providers' documentation, support cases and most international cloud teams. is the language of the documentation, and GermanAsked in 60% of cloud engineer ads (as of 5 Nov 2026).Asked for in most ads in Germany, Austria and Switzerland, where cloud teams work with business departments. is asked for in most ads in German-speaking countries.
Where the jobs are, country by country
Each country below has its own figures: which cities have the most jobs in our list, whether the number is going up or down, how often ads offer remote or hybrid work, the titles used in the country, and pay ranges from published research, in the local currency.
Germany
11% of the ads offer hybrid work, and 15% are fully remote.
Pay (Base salary)
- Entry level: €46,400 to €58,800 a year
- Mid-level: €55,608 to €74,360 a year
- Senior: €74,360 to €99,435 a year
Total pay: the German sources give base salary only, with no figures for bonuses.
Entry level is the starting range get in IT gives for IT graduates with a bachelor's or master's degree; mid-level runs from the low end of Indeed's cloud engineer range to its average, senior from the average to the top. Hamburg, Munich and Frankfurt lead Indeed's city figures.
Sources: get in IT (2026), Indeed (Oct 2026).
Pay researched on 28 Oct 2026.
Titles and language: German ads mostly keep the English title Cloud Engineer, sometimes Cloud Ingenieur or Cloud-Administrator, and most ask for GermanAsked in 60% of cloud engineer ads (as of 5 Nov 2026).Asked for in most ads in Germany, Austria and Switzerland, where cloud teams work with business departments. next to EnglishAsked in 54% of cloud engineer ads (as of 5 Nov 2026).The working language of the providers' documentation, support cases and most international cloud teams..
Security catalogues: German public bodies and many regulated companies ask whether a cloud service meets C5, the cloud security criteria catalogue of the BSI, the German federal office for information security, and expect cloud engineers to know which controls it covers.
Job figures as of 5 Nov 2026.
United States
12% of the ads offer hybrid work, and 68% are fully remote.
100% of the ads that say are full-time.
Pay (Base salary)
- Entry level: $60,000 to $91,409 a year
- Mid-level: $91,409 to $136,592 a year
- Senior: $136,592 to $207,634 a year
Total pay: Payscale gives cloud engineers bonuses of about $1,000 to $15,000 and profit sharing of about $4,000 to $13,000 a year.
Entry level runs from the low end of Payscale's cloud engineer range to its average; mid-level from there to the average Indeed gives from job ads; senior from that average to the top of Indeed's range. Payscale's figures come from fewer salaries and sit well below the ads.
Sources: Payscale: cloud engineer (Sep 2026), Indeed (Oct 2026).
Pay researched on 28 Oct 2026.
Government work: in the US, cloud services used by federal agencies need a FedRAMP authorisation, the US government's security programme for cloud services, so engineers on those systems work with its controls and evidence.
How the work is offered: US ads mostly offer full-time employment; contract roles exist for migrations and short projects, and on-call duty is often named in the ad.
Job figures as of 5 Nov 2026.
United Kingdom
3% of the ads offer hybrid work, and 59% are fully remote.
Pay (Base salary)
- Entry level: £37,417 to £49,600 a year
- Mid-level: £55,000 to £87,500 a year
- Senior: £60,000 to £100,000 a year
Total pay: the UK sources give base salary only, with no figures for bonuses.
Entry level runs from the low end of Indeed's range to the lower tenth of the pay ITJobsWatch gives for cloud engineer jobs over six months; mid-level is the middle half of that range; senior runs from the lower quarter to the top tenth of ITJobsWatch's senior cloud engineer range. London leads Indeed's city figures.
Sources: ITJobsWatch: cloud engineer (Oct 2026), ITJobsWatch: senior cloud engineer (Oct 2026), Indeed (Oct 2026).
Pay researched on 28 Oct 2026.
Security guidance: UK public bodies and many companies follow the Cloud Security Principles of the NCSC, the UK's National Cyber Security Centre, when they choose and set up cloud services.
Job figures as of 5 Nov 2026.
Switzerland
6% of the ads offer hybrid work, and 52% are fully remote.
Pay (Base salary)
- Entry level: CHF 87,784 to CHF 104,051 a year
- Mid-level: CHF 104,051 to CHF 113,761 a year
- Senior: CHF 113,761 to CHF 147,426 a year
Total pay: the Swiss sources give base salary only, with no figures for bonuses.
No Swiss source gives figures by level, so the levels are cut from two ranges: entry level runs from the low end of Indeed's range to Jooble's average, mid-level from there to Indeed's average, and senior from that average to the top of Indeed's range.
Sources: Indeed (Oct 2026), Jooble (Oct 2026).
Pay researched on 28 Oct 2026.
Banks and outsourcing: Swiss banks and insurers, supervised by FINMA, the Swiss financial regulator, treat a move to the cloud as outsourcing with rules of its own, so cloud engineers there document where data sits and who can reach it.
Job figures as of 5 Nov 2026.
India
Pay (Base salary)
- Entry level: ₹2.29 lakh to ₹4.98 lakh a year
- Mid-level: ₹5.71 lakh to ₹10.72 lakh a year
- Senior: ₹10.72 lakh to ₹20.13 lakh a year
Total pay: Payscale gives cloud solutions engineers in India bonuses of about ₹10,000 to ₹5.92 lakh a year.
Entry level runs from the low end of Payscale's range for cloud solutions engineers, the nearest title it has, to its figure for one to four years of work. Mid-level runs from the low end of Indeed's cloud engineer range to its average, senior from the average to the top; Indeed's figures rest on few salaries.
Sources: Indeed (Oct 2026), Payscale: cloud solutions engineer (Sep 2026).
Pay researched on 28 Oct 2026.
Government cloud: in India, MeitY, the Indian ministry of electronics and IT, keeps a list of empanelled cloud service offerings for government work, and CERT-In, India's computer emergency team, asks for many cyber incidents to be reported within six hours.
Providers and certifications
Three providers appear in most ads: AWS, Azure and Google Cloud. Each has its own names for the same ideas, such as accounts, subscriptions or projects, and its own tools for infrastructure as code, such as CloudFormation, Bicep or Google Cloud's deployment tools, next to Terraform and Pulumi, which work across all three. Companies choose by what they already run, their contracts and their developers, and many use two.
AWS, Azure and Google Cloud each offer role-based certifications, from a foundations level to architect, security and specialist levels, and Kubernetes has hands-on exams of its own. Some ads name one; most ask for experience with the provider in production. No law asks for a certification to work as a cloud engineer.
Your CV for a cloud engineer job
A cloud CV is read twice: by hiring software that matches the ad's words, and by a lead engineer who wants to know what you built, how big it was, what it cost and what broke. Give both: the keywords and the evidence.
Use the keywords the ads use
- Name the providers and services as the ad does: "AWS", "Azure", "Google Cloud", "Terraform", "Kubernetes", "landing zone", "IAM", "VPC" or "VNet". The skills table above shows which keywords the ads use most.
- Say how much you ran: the number of accounts or subscriptions, workloads, environments, and whether you were on call.
- Write a certification you are working towards as "in progress" with the planned month, next to the hands-on work it covers.
- Name the security and compliance work you did, such as access reviews or an audit, because regulated employers read for it.
Prove each skill
A cloud line proves itself with something that became safer, faster, cheaper or repeatable: a landing zone teams now use, a migration with little downtime, a bill cut, a recovery tested.
| Skill | Weak line | Strong line, with proof |
|---|---|---|
| TerraformAsked in 40% of cloud engineer ads (as of 5 Nov 2026).Write and review modules, keep state safe, plan before apply, and find drift between the code and the cloud. | Wrote Terraform. | Wrote the Terraform modules for networks and accounts used by 14 teams; a new environment takes an hour instead of two weeks. |
| AWSAsked in 52% of cloud engineer ads (as of 5 Nov 2026).Accounts and organisations, identity and roles, networks, compute, storage and managed databases, and the bill. depends on the provider | Worked with AWS. | Built the AWS landing zone for 40 accounts with central logging and guard rails; no public storage bucket since go-live. |
| AzureAsked in 47% of cloud engineer ads (as of 5 Nov 2026).Subscriptions and management groups, Entra ID for identity, virtual networks, policies and the cost reports. depends on the provider cost | Responsible for cloud costs. | Introduced tagging and budgets across 60 Azure subscriptions; the monthly bill fell by a fifth in two quarters. |
| KubernetesAsked in 60% of cloud engineer ads (as of 5 Nov 2026).Run workloads on a managed cluster: deployments, scaling, networking, secrets and upgrades of the cluster. | Kubernetes administration. | Ran three managed Kubernetes clusters for 30 services; cluster upgrades moved from a weekend to a working day with no outage. |
| Migration | Migrated applications to the cloud. | Moved 22 applications out of the data centre with the teams that own them; every cut-over under an hour. |
Write only what you built or changed yourself. If a platform team owned the work, say which part was yours: a module, a design, a migration wave, an incident.
How we read our data
- The jobs: the cloud engineer jobs in our job search (cloud engineer, cloud architect and the German titles), matched by their titles the way the search matches them. Our list is not the whole market, so we give shares and rankings, never counts.
- The skills: every day we read a sample of these ads and count the skills in them with a fixed word list. Only the counts are kept, never the text of an ad.
- Pay: from published salary research, each source named with its date, as a range from entry level to senior. Our ads are not used for it.
- Dates: every figure is worked out again each day and shows the day it was worked out.
Frequently asked questions
- What does a cloud engineer do?
- Builds and runs a company's setup at a cloud provider: accounts, identity, networks, compute, storage, backups and monitoring, mostly as code, and keeps it secure and affordable.
- Which cloud should I learn first?
- The one the jobs you want name. The ideas of identity, networks, infrastructure as code and cost carry over between AWS, Azure and Google Cloud.
- Do I need a certification?
- No law asks for one. Some ads name a provider's certification; most want experience with the provider in production.
- Is a cloud engineer the same as a DevOps engineer?
- They overlap. Cloud engineers focus on the cloud platform itself; DevOps engineers on the way software is built, shipped and run. Many ads ask for both.
- What should a cloud CV show first?
- The providers and tools, the size of what you ran, and results such as environments built faster, costs cut or incidents avoided.
More on the cloud engineer role
See open Cloud Engineer jobsScore your CV for these jobs
Related roles
Jobs from Arbeitnow and the Bundesagentur für Arbeit