KPMG
Multinational professional services network, and one of the Big Four accounting organizations.
4 Rounds
~21 Days
Medium
The Interview Loop
Recruiter Screen (30 min)
Standard fit check, behavioral questions, and resume overview.
Technical Loop (3-4 Rounds)
Deep dive into domain knowledge, coding, and system design.
Interview Question Bank
Cloud Engineer
•
Behavioral
•
medium
Tell me about a time you had to explain a complex cloud architecture to a non-technical client stakeholder. How did you ensure they understood the value and risks?
#Communication
#Client Management
#Consulting
Cloud Engineer
•
Behavioral
•
medium
Describe a situation where a client's cloud migration project was falling behind schedule due to unforeseen technical debt. How did you handle it?
#Project Management
#Problem Solving
#Agile
Cloud Engineer
•
Behavioral
•
easy
Why are you interested in a Cloud Engineering role at KPMG specifically, as opposed to a product-focused tech company?
#Motivation
#Consulting Mindset
Cloud Engineer
•
Behavioral
•
hard
Tell me about a time you disagreed with a senior architect or a client regarding a cloud design choice (e.g., choosing IaaS over PaaS). How did you resolve it?
#Conflict Resolution
#Technical Influence
#Collaboration
Cloud Engineer
•
Behavioral
•
medium
Describe a time you had to quickly learn a new cloud service or tool to meet a strict client deadline.
#Adaptability
#Continuous Learning
Cloud Engineer
•
Coding
•
medium
Write a Python script using Boto3 (or Azure SDK) to find and stop all EC2 instances (or VMs) that do not have a specific 'Environment' tag.
#Python
#Boto3
#Automation
#Cloud SDK
Cloud Engineer
•
Coding
•
medium
Write a Bash script to parse a web server log file, count the number of 500 HTTP status codes, and output the top 5 IP addresses causing them.
#Bash
#Linux
#Log Parsing
#Awk/Sed
Cloud Engineer
•
Coding
•
easy
Given a JSON payload representing cloud billing data, write a Python function to aggregate the total cost per service.
#Python
#Data Manipulation
#JSON
Cloud Engineer
•
Coding
•
hard
Write a Python function to check if a given CIDR block overlaps with a list of existing CIDR blocks in a VPC.
#Python
#Networking
#IP Addressing
Cloud Engineer
•
Coding
•
medium
Implement a retry mechanism with exponential backoff in Python for an API call to a cloud service that frequently rate-limits.
#Python
#API
#Resiliency
#Algorithms
Cloud Engineer
•
System Design
•
hard
Design a highly available, multi-region web application on Azure for a financial services client with strict data residency and compliance requirements.
#Azure
#High Availability
#Compliance
#Traffic Manager
Cloud Engineer
•
System Design
•
medium
A client wants to migrate their legacy monolithic application to AWS. Walk me through your assessment and migration strategy.
#AWS
#Migration
#6 R's
#Assessment
Cloud Engineer
•
System Design
•
hard
How would you design a disaster recovery strategy for an enterprise database hosted in the cloud with an RPO of 5 minutes and RTO of 1 hour?
#Disaster Recovery
#RPO/RTO
#Database
#Replication
Cloud Engineer
•
System Design
•
hard
Design a secure hub-and-spoke network topology in Azure. How do you handle routing, firewall rules, and isolation for different client departments?
#Azure Networking
#Hub and Spoke
#VNet Peering
#Azure Firewall
Cloud Engineer
•
System Design
•
medium
A client is experiencing unexpectedly high cloud costs. How would you architect a cost-optimization strategy for their AWS environment?
#FinOps
#Cost Optimization
#AWS
#Right-sizing
Cloud Engineer
•
System Design
•
medium
Explain how you would design an event-driven architecture using serverless components for a tax document processing system.
#Serverless
#Event-Driven
#AWS Lambda
#Azure Functions
Cloud Engineer
•
System Design
•
hard
Design a centralized logging and monitoring solution for a multi-cloud environment spanning AWS and Azure.
#Multi-cloud
#Logging
#Monitoring
#SIEM
Cloud Engineer
•
System Design
•
hard
Walk me through the architecture of a secure data lake in GCP for an audit analytics platform.
#GCP
#Data Lake
#BigQuery
#Security
Cloud Engineer
•
Technical
•
hard
How do you ensure compliance (e.g., HIPAA or PCI-DSS) when designing a cloud infrastructure for a healthcare client?
#Compliance
#Security
#Encryption
#Audit
Cloud Engineer
•
Technical
•
medium
Compare and contrast AKS (Azure Kubernetes Service) and Azure App Service. When would you recommend one over the other to a client?
#Azure
#Containers
#PaaS
#Kubernetes
Cloud Engineer
•
Technical
•
medium
How do you manage Terraform state files securely in a team environment, specifically for a client with strict access controls?
#Terraform
#IaC
#Security
Cloud Engineer
•
Technical
•
medium
Explain the difference between Terraform modules and workspaces. Give an example of how you've used them in an enterprise environment.
#Terraform
#IaC
#Code Reusability
Cloud Engineer
•
Technical
•
hard
Describe the steps to build a CI/CD pipeline to deploy a Dockerized application to an EKS cluster securely.
#CI/CD
#Kubernetes
#Docker
#Security
Cloud Engineer
•
Technical
•
medium
What is GitOps, and how would you implement it using ArgoCD or Flux for a client's Kubernetes workloads?
#GitOps
#Kubernetes
#ArgoCD
#Continuous Deployment
Cloud Engineer
•
Technical
•
medium
How do you handle secrets management in a CI/CD pipeline and within the cloud environment (e.g., Azure Key Vault, HashiCorp Vault)?
#Secrets Management
#CI/CD
#Azure Key Vault
Cloud Engineer
•
Technical
•
hard
A deployment to production just failed and brought down the client's live environment. Walk me through your troubleshooting and rollback steps.
#Incident Response
#Troubleshooting
#Rollback
Cloud Engineer
•
Technical
•
easy
Explain how you would use Azure DevOps to enforce branch policies and code quality checks before merging.
#Azure DevOps
#Git
#Code Quality
Cloud Engineer
•
Technical
•
hard
How do you implement infrastructure drift detection and remediation using Terraform?
#Terraform
#Drift Detection
#Automation
Cloud Engineer
•
Technical
•
medium
Describe your approach to blue/green deployments versus canary deployments. When is each appropriate for a client?
#Deployment Strategies
#Blue/Green
#Canary
Cloud Engineer
•
Technical
•
medium
How do you write unit and integration tests for Infrastructure as Code?
#IaC
#Testing
#Terratest
#Checkov
Cloud Engineer
•
Technical
•
medium
Explain the difference between a NAT Gateway, an Internet Gateway, and a Transit Gateway in AWS.
#AWS Networking
#VPC
#Routing
Cloud Engineer
•
Technical
•
hard
How does Azure Active Directory (Entra ID) integrate with on-premises Active Directory? Explain the authentication flow.
#Azure AD
#Hybrid Identity
#Authentication
Cloud Engineer
•
Technical
•
medium
What are VPC endpoints (or Azure Private Link), and why are they critical for enterprise security?
#Cloud Networking
#Security
#Private Link
Cloud Engineer
•
Technical
•
medium
Explain the concept of least privilege in IAM. How do you audit and enforce it in a large AWS environment?
#IAM
#Security
#AWS IAM Access Analyzer
Cloud Engineer
•
Technical
•
hard
How do you troubleshoot a scenario where a pod in a Kubernetes cluster cannot connect to an external managed database?
#Kubernetes
#Troubleshooting
#Networking
Difficulty Radar
Based on recent AI-sourced data.
Meet Your Interviewers
The "Standard" Interviewer
Senior EngineerFocuses on core competencies, system constraints, and clear communication.
SimulateUnwritten Rules
Think Out Loud
Always explain your thought process before writing code or drawing architecture.