The work is cloud engineering with a software engineer's responsibilities. Candidates describe building and maintaining cloud-based applications, configuring environments so storage and compute are used efficiently and securely, and automating deployment and alerting. The role is reported to cover the whole path from design to production deployment and monitoring, and to involve modernising legacy systems and migrating data. Collaboration is part of the job: Cloud Architects on system design, the Managed Services team on keeping deployments stable after launch, and Cloud Engagement Managers on turning client requirements into engineering tasks.
The reported questions fall into three families. Cloud and infrastructure basics cover the advantages of cloud over on-premise, public versus private versus hybrid, auto-scaling and its trigger metrics, securing sensitive user data, and the purpose of a VPC. Past projects and experience cover your undergraduate final project, your hardest technical challenge, why you chose one technology over an alternative, learning something fast, and how you tested your work. Behavioral and business alignment questions cover motivation, ambiguous requirements, disagreement, career direction and competing deadlines. Topics candidates tag most are AWS, cloud computing basics, Python, managed services and cloud architecture. The listed stack is Python, Java or Node.js, Git, REST APIs, SQL and NoSQL, with Terraform, CloudFormation, Docker and Kubernetes as extras.
Candidates describe the conversations as friendly, and some report good rapport but no offer because their technical depth fell short. Treat the tone as a reason to prepare more: be ready to explain how each cloud service on your CV works and why you picked it. For the Business Head round, practise explaining a technical decision in terms of client impact, latency or infrastructure cost, and keep six prepared stories for the behavioral questions. One candidate review mentions that communication across time zones can be hard, so examples that show clear written follow-up are worth having.
HR Screening
reportedCandidates describe HR Screening as the first conversation, covering your background, availability and cultural fit. Treat it as the place to give a clean account of your path and to settle logistics. Have a short, specific answer for why you want cloud work and why this company, since motivation is a reported question type in this loop.
What to demonstrate
- Your background and how it maps to a cloud-focused Software Engineer role
- Availability and logistics
- Cultural alignment, as candidates describe the stage
How to prepare
- Write a CV walk-through that names the AWS, GCP, Python or API work you actually did, in the order that leads to this role.
- Prepare the answer to why you are passionate about cloud computing and joining Ankercloud specifically, using one fact about the company you verified yourself.
- Have notice period, location and start-date constraints ready, and the two or three cloud services you can defend in depth.
Business Head Conversation
reportedCandidates describe the Business Head Conversation as a discussion with a Business Head or senior leader about your career goals, your understanding of Ankercloud and how well you communicate. Because the audience is business-facing, lead with outcomes and explain technical terms in plain language.
What to demonstrate
- Career goals and how they fit the role
- Communication of technical ideas to a non-technical listener
- Understanding of Ankercloud and its client work
How to prepare
- Rehearse the career-direction answer: one concrete skill goal for the next year and one longer direction you can justify.
- Prepare the ambiguous-requirements story and the competing-deadlines story, each ending with a result a client or business owner would care about.
- Write two or three questions for the Business Head, for example about expansion plans, technical hurdles, or how engineering supports sales and managed services.
Technical Round
reportedCandidates describe the Technical Round as the deepest stage, covering cloud computing knowledge and your past projects, with engineers and architects on the other side. Candidates call the difficulty average, yet some report a friendly conversation that still ended without an offer because of thin technical depth. Prepare cloud fundamentals out loud and rehearse a project walkthrough in which every technology choice has a stated alternative.
What to demonstrate
- Cloud fundamentals: compute, storage, networking and identity on AWS or GCP
- Ownership of past projects: design choices, challenges and outcomes
- Core engineering: basic to intermediate algorithms, API design and troubleshooting a failing service
How to prepare
- Explain out loud the purpose of a VPC, what metrics trigger auto-scaling, and how you would store sensitive user data securely, with trade-offs.
- Build a one-page architecture sketch of your undergraduate final project or last role, and for each service on it write why you chose it over an alternative.
- Practise Python and a small REST API design, then rehearse debugging a service that suddenly returns 500 errors: logs, recent deploys, dependencies, then root cause.
PracHub editorial advice for the preparation topics above.
Listing AWS or GCP services on your CV that you only know by name
Candidates report that interviewers drill into technologies you claim. For each service on your CV, prepare what it does, one thing you built with it, why you chose it over an alternative, and one thing that went wrong. Remove anything you cannot defend.
Treating a friendly Technical Round as a casual chat and giving shallow answers on basics such as a VPC, auto-scaling or secure storage
Candidates report good rapport that still ended without an offer. Answer each basic with the mechanism and a trade-off: subnets and routing for a VPC, scaling metrics such as CPU or request load for auto-scaling, encryption and access control for sensitive data. Say them out loud.
Telling your undergraduate or last-role project as a team story with no clear personal contribution
Use I for what you decided and built. For each major choice, such as the database or framework, name the alternative you rejected and the reason. End with a tangible result, such as lower latency, lower cost or a feature shipped.
Answering the Business Head in infrastructure jargon without saying why it matters
Add one sentence on client or business impact to every technical answer, and rehearse explaining a design choice to someone who has never deployed anything. Ask the Business Head informed questions about the company's direction.
Bluffing when asked about a cloud service you have not used
Say plainly that you have not used it, then compare it with the closest service you do know and explain how you would learn it. This is the approach candidate tips recommend, and it keeps your credibility for the topics you do know.
Choose a category, try a prompt, then open its approach, worked solution or follow-up when you need it.
Track a rolling failure rate per destination for circuit decisions
The egress service delivers about 1,500 webhooks per second across roughly 40,000 destinations, each call bounded by a 10 second timeout. Maintain, per destination, the failure rate over the trailing 60 seconds so a caller can ask before dispatch whether the circuit should open. Attempts arrive as (destination_id, finished_at_ms, outcome). Requirement: amortised O(1) per attempt, with total memory bounded by the destination count rather than by traffic. Give the structure, its exact memory, and the rule that stops a destination with three attempts from opening a circuit.
Approach
- Name the exact-deque version and then reject it as the default. Holding timestamps and advancing a tail pointer past anything older than now minus 60 seconds is a correct two-pointer window at amortised O(1) per attempt, but its memory tracks in-window traffic, so one destination in a retry storm holds hundreds of thousands of entries while thousands of quiet destinations hold none.
- Use a ring of 60 one-second buckets per destination, each bucket a pair of counters for attempts and failures. On an attempt, advance the ring by the elapsed whole seconds, zeroing at most min(elapsed, 60) buckets, then increment the head. That is amortised O(1) with a fixed footprint per destination.
- State the footprint: 60 buckets times two 4-byte counters is 480 bytes of payload per destination, so 40,000 destinations is roughly 20 to 25 MB with per-entry overhead, bounded by the catalogue rather than by the rate. The cost is granularity, since the oldest bucket ages out in whole seconds, which is far tighter than the decision needs.
- Require a minimum sample before the circuit may open. A destination with three attempts and three failures reads as 100 percent and is not evidence; a floor of roughly 20 attempts in the window makes the ratio meaningful, and below that floor use a run of consecutive failures as the trigger instead.
Follow-up
- The fleet is 30 instances and each sees roughly a thirtieth of a destination's traffic. Where does the rate actually live, and what does a per-instance answer get wrong?
- A destination answers in 9.5 seconds and succeeds. It is not failing but it is consuming your per-destination concurrency. What signal should open the circuit here?
Merge partitioned event streams into one ordered feed with bounded lateness
The read-model service consumes 64 log partitions carrying about 4,000 events per second in total. Each partition is ordered within itself, but partitions drift by up to 30 seconds, and the activity feed must present a tenant's events in occurred_at order. Produce the merge. State its complexity, the buffer it requires in events and in bytes, what happens when one partition is idle, and what you do with an event that arrives after you have already emitted its position. Payloads average 1 KB.
Approach
- Merge with a min-heap over the 64 partition heads keyed on (occurred_at, event_id): O(log P) per event and O(n log P) overall. The tie-break on event_id is what makes the output deterministic when two partitions carry the same millisecond, which matters because the feed is paginated and a non-deterministic order reorders pages under the reader.
- Emitting the heap head is only correct once every partition has produced everything up to that timestamp, so the emit condition is a watermark: the minimum across partitions of the highest occurred_at seen, less the allowed lateness. Events are held until the watermark passes them, which is what turns individually ordered streams into a jointly ordered one.
- Size the buffer from the lateness rather than guessing: 4,000 events per second times 30 seconds is 120,000 buffered events, and at 1 KB each about 120 MB of heap. That number is the real price of the ordering guarantee and belongs in front of whoever asked for it.
- Handle the idle partition explicitly, because it fails the feed rather than corrupting it: a partition with no traffic never advances its own maximum, so the watermark freezes and output stops entirely. Either every partition emits a periodic idle marker carrying the broker's current time, or the watermark falls back to wall clock for a partition silent beyond a threshold.
Follow-up
- The lateness budget is raised to five minutes. What is the new buffer, and what besides memory changes?
- The consumer restarts. Where does it resume from, and what does the feed look like for the first 30 seconds?
Collapse a redelivered event batch into per-aggregate high-water marks
You drain a batch of up to 5,000,000 events, each (aggregate_id BIGINT, aggregate_version INT, event_type, payload). The log guarantees order within one aggregate only; the batch merges 64 partitions, and a relay failover has redelivered a range, so an older version for an aggregate can appear after a newer one. Given a map of last_applied_version per aggregate, produce the events worth applying, at most one per (aggregate_id, version), plus the count discarded. Target O(n) time. State the memory for 2,000,000 distinct aggregates and what you do when it does not fit.
Approach
- One pass, one hash map from aggregate_id to the highest version kept, and a discard counter. An event whose version is at or below last_applied_version for its aggregate is dropped without further work, which is the whole reason the event carries its version rather than a delta. O(n) expected time, O(d) space in distinct aggregates.
- Keep the maximum, never the last occurrence. The redelivered range means the final appearance of an aggregate in the batch can be an older version than one seen earlier in the same batch, so last-wins applies stale state over newer state and the projection regresses with no error anywhere.
- Cost the memory instead of calling it large: an 8-byte key plus a 4-byte version is 12 bytes of payload, and an open-addressed table held at a 0.7 load factor costs roughly 17 bytes per entry before per-slot metadata, so 2,000,000 aggregates is tens of megabytes in a native layout and several times that in a runtime that boxes both key and value.
- If the distinct set exceeds memory, partition on hash(aggregate_id) mod P and reduce each partition independently. Every event for one aggregate hashes to the same partition, so the per-partition result is exact and the merge is concatenation rather than a second reduction.
Follow-up
- The payload is a patch rather than a snapshot, so applying only the highest version loses the intermediate changes. What changes in your reduction?
- How do you detect that version 7 arrived while version 6 was never delivered, and what should the consumer do about the gap?
Hold a per-tenant active cap against concurrent creates
A tenant on the standard plan may hold at most 50 resources with status='active'. The create handler runs SELECT count(*) FROM resource WHERE tenant_id = $1 AND status = 'active', compares to 50, then inserts. Two creates arrive 3 ms apart on different instances and the tenant lands at 51. Name the anomaly, say whether PostgreSQL 16 READ COMMITTED or REPEATABLE READ prevents it and why, then give an implementation that holds the cap at READ COMMITTED with the exact statements. Finally, say what changes when the cap is 'at most one running export per tenant' on job_run.
Approach
- Name it: write skew. The two transactions read an overlapping set and write disjoint rows, so there is no row-level conflict for the engine to detect and each commit is individually legal.
- Rule out the levels precisely. READ COMMITTED takes a fresh snapshot per statement and takes no lock on the counted rows, so both see 49. PostgreSQL's REPEATABLE READ is snapshot isolation: it removes non-repeatable reads and phantoms within the snapshot but still admits write skew, because the anomaly is not a re-read of a changed row, it is a read of a set that a concurrent transaction invalidates. Only SERIALIZABLE closes it, by tracking the read dependency and aborting one transaction with SQLSTATE 40001 — a guarantee that exists only if the application re-runs the whole transaction from the read.
- Convert the set predicate into a single-row conflict: keep tenant.active_resource_count and run UPDATE tenant SET active_resource_count = active_resource_count + 1 WHERE tenant_id = $1 AND active_resource_count < 50 in the same transaction as the INSERT. Zero affected rows is the cap, returned as 409. The row lock serialises the decision at any isolation level, and contention is bounded to one tenant's row — which is also the fair-scheduling unit, unlike a global counter that would convoy every tenant behind one row.
- State the cost you just took on: a counter is a second source of truth that can drift, so every path that changes status must adjust it inside the same transaction, and a periodic reconciliation has to exist, with resource_revision as the authority for what the count should have been.
Follow-up
- A resource moves from archived back to active. Which statements change, and what breaks if the counter update and the status change land in different transactions?
- The cap becomes plan-dependent and a plan can change mid-month. Where does the number 50 live, and who reads it?
Find version gaps and relay lag with window functions
outbox_event holds event_id, aggregate_type, aggregate_id, aggregate_version, event_type, payload, status ('pending','published','dead'), attempts, created_at, published_at. A projection is missing rows and you must decide whether the relay skipped events or the consumer dropped them. Write three queries over the last seven days: one listing every aggregate_id whose published aggregate_version sequence has a hole, one giving per-day counts with a running total, and one returning the newest published event per aggregate. For each, say where the window function is evaluated relative to WHERE and LIMIT. PostgreSQL 16.
Approach
- Gaps: compute lead(aggregate_version) OVER (PARTITION BY aggregate_id ORDER BY aggregate_version) in a subquery, then filter next_version <> aggregate_version + 1 in the outer query. Window functions are evaluated after WHERE, GROUP BY and HAVING and before the outer ORDER BY and LIMIT, so the predicate cannot sit in the same WHERE clause and PostgreSQL 16 has no QUALIFY.
- Say what the seven-day filter does to the answer: it truncates every partition, so the first row per aggregate has no predecessor inside the window and a hole spanning the boundary is invisible. Widen the window, or join to resource.version as the authority for the true maximum.
- Running total: SELECT date_trunc('day', created_at) AS d, count() AS n, sum(count()) OVER (ORDER BY date_trunc('day', created_at) ROWS UNBOUNDED PRECEDING). An aggregate inside a window call is legal because grouping runs before windowing. The grouping key is unique per row here so ROWS and RANGE agree, but write the frame anyway — over ungrouped rows with tied timestamps the default RANGE frame pulls in every peer row and the total jumps.
- Newest per aggregate: DISTINCT ON (aggregate_id) ... ORDER BY aggregate_id, aggregate_version DESC is the cheap PostgreSQL-only form when an index matches that order; row_number() OVER (PARTITION BY aggregate_id ORDER BY aggregate_version DESC) = 1 is the portable form and needs a subquery for the same evaluation-order reason as the gap query.
Follow-up
- Relay failover redelivers events. Does a duplicate break the gap query, and how would you detect one from this table alone?
- Turn the gap check into a continuous monitor rather than a query someone runs after an incident. What does it watch?
What are the main advantages of using cloud computing over traditional on-premise infrastructure?
What are the main advantages of using cloud computing over traditional on-premise infrastructure?
Approach
- Frame it as a cost model first: on-premise means buying hardware sized for peak load up front (capex) and carrying idle capacity; cloud bills for what runs (opex), down to per-second billing for many instance types.
- Elasticity: an Auto Scaling group or managed instance group adds capacity in minutes, where an on-premise expansion waits on procurement, racking and power.
- Managed services move operational work to the provider: RDS or Cloud SQL handles backups, patching and standby failover. Tie this to the shared responsibility model: the provider secures the physical and virtualisation layers, while I still own IAM, data and configuration.
- Resilience and reach: several availability zones and regions let me deploy across isolated data centres without building any of them.
- Close with the honest trade-offs: steady, predictable load can cost more than owned hardware unless I use reserved instances, savings plans or committed-use discounts. Data egress fees, vendor lock-in and data-residency rules also count against the cloud.
Follow-up
- When would you advise a client to keep a workload on-premise?
- How would you estimate whether a migration actually saves money?
- Explain the shared responsibility model for a managed database versus a plain VM.
Can you explain the difference between a public, private, and hybrid cloud?
Can you explain the difference between a public, private, and hybrid cloud?
Approach
- Define each one by who owns the infrastructure and who shares it. Public cloud is provider-owned and multi-tenant, with logical isolation (AWS, GCP, Azure). A private cloud is dedicated to one organisation, on-premise or hosted (for example VMware or OpenStack). Hybrid connects the two so workloads and data can move between them.
- For hybrid, explain the plumbing that makes it work: a site-to-site IPsec VPN or a dedicated link (AWS Direct Connect, GCP Cloud Interconnect), non-overlapping CIDR ranges, shared identity, and consistent monitoring across both sides.
- Compare the trade-offs. Public cloud gives elasticity and pay-per-use. Private cloud gives control and easier compliance for some regulated data, but someone has to buy and run the capacity. Hybrid gives flexibility and costs the most operational effort.
- Give one concrete use case for each, for example regulated records kept on-premise while a stateless web tier bursts into public cloud, or a phased migration that runs hybrid for months.
- Head off two common confusions: multi-cloud (two or more public providers) is not the same as hybrid, and a VPC is logically isolated networking inside a public cloud, not a private cloud.
Follow-up
- How would you connect an on-premise data centre to AWS, and when is a VPN not enough?
- Is a VPC a private cloud? Why or why not?
- How would you keep authentication consistent across a hybrid setup?
How does auto-scaling work, and what metrics would you use to trigger it?
How does auto-scaling work, and what metrics would you use to trigger it?
Approach
- Describe the mechanics on one platform. An AWS Auto Scaling group has min, desired and max capacity and a launch template. CloudWatch metrics drive the scaling policies, new instances register with the load balancer's target group, and failed health checks get instances replaced.
- Name the policy types: target tracking (for example, hold average CPU near 50%), step scaling on CloudWatch alarm thresholds, scheduled scaling for known peaks, and predictive scaling. In Kubernetes, the Horizontal Pod Autoscaler scales pods, and Cluster Autoscaler or Karpenter adds nodes.
- Pick the metric that matches the bottleneck: CPU for compute-bound services, request count per target (ALBRequestCountPerTarget) for web tiers, and queue backlog per instance (SQS ApproximateNumberOfMessagesVisible divided by instance count) for workers. Memory is not published for EC2 unless the CloudWatch agent is installed. Latency is a symptom, so I treat it as a risky sole trigger.
- Prevent flapping: set instance warm-up and cooldown, scale out quickly and scale in slowly, and cap max capacity so a scale-out cannot exhaust database connections downstream.
- Edge cases: instances must be stateless (sessions in Redis or DynamoDB). Slow boot times call for pre-baked AMIs or container images. Scale-in needs connection draining (deregistration delay) or lifecycle hooks so in-flight requests are not dropped.
Follow-up
- Traffic spikes faster than new instances can boot. What do you change?
- Why can scaling on CPU fail for an I/O-bound service?
- How do you stop a scaled-out web tier from overwhelming the database?
Describe how you would securely store sensitive user data in the cloud.
Describe how you would securely store sensitive user data in the cloud.
Approach
- Start with classification and minimisation: store only the fields I need, hash passwords with bcrypt or Argon2 (never reversible encryption), and tokenise or mask identifiers where the raw value is not required.
- Encrypt at rest with a key service: S3 SSE-KMS, encrypted RDS and EBS volumes. Explain envelope encryption: a data key encrypts the data, and the KMS key encrypts the data key. Enable key rotation, and add application-level encryption for the most sensitive columns.
- Encrypt in transit: TLS on every hop, enforced on S3 with a bucket policy that denies requests where aws:SecureTransport is false, and TLS required on database connections.
- Lock down access: least-privilege IAM roles instead of long-lived access keys in code, S3 Block Public Access, databases in private subnets with security groups that allow only the app tier, and secrets in Secrets Manager, Parameter Store or GCP Secret Manager.
- Detect and recover: CloudTrail logs for KMS and data-access events with alerts on anomalies, versioning and tested backups, and region choice for data-residency requirements.
Follow-up
- Walk through envelope encryption. Why not encrypt everything directly with the KMS key?
- A customer leaves and wants their data unrecoverable. How do you guarantee that?
- How would you rotate a database password without downtime?
What is the purpose of a Virtual Private Cloud (VPC)?
What is the purpose of a Virtual Private Cloud (VPC)?
Approach
- Purpose: a VPC is a logically isolated network inside a public cloud. I choose its IP range (CIDR), split it into subnets, and decide through routing what can reach the internet and what cannot.
- Components: public subnets route to an internet gateway, and private subnets reach out through a NAT gateway. Security groups are stateful, attach to instances and contain only allow rules. Network ACLs are stateless, apply to subnets, allow both allow and deny rules, and are evaluated in rule-number order.
- Sketch a standard layout: a load balancer in public subnets across at least two availability zones, the app tier in private subnets, and the database in isolated subnets. In AWS a subnet lives in one AZ; in GCP the VPC is global and its subnets are regional.
- Connectivity: VPC peering (not transitive), Transit Gateway for hub-and-spoke designs, VPN or Direct Connect to on-premise, and VPC endpoints (gateway endpoints for S3 and DynamoDB, interface endpoints through PrivateLink) so traffic to those services skips the internet and the NAT gateway.
- Edge cases: pick non-overlapping CIDRs so later peering works, put one NAT gateway per AZ to avoid a cross-AZ single point of failure, and turn on VPC Flow Logs for troubleshooting.
Follow-up
- An instance in a private subnet cannot reach the internet. Walk through how you debug it.
- When would you use a network ACL rather than a security group?
- How would an app in a private subnet read from S3 without a NAT gateway?
Walk me through the cloud computing aspects of your undergraduate final project.
Walk me through the cloud computing aspects of your undergraduate final project.
Approach
- Open with the problem and the users in one sentence, then draw the architecture: client, compute (EC2, Lambda, App Engine or containers), storage, database and deployment path. Say clearly which parts I built myself.
- For each cloud service, give the reason and the alternative I rejected. For example: Lambda over EC2 because traffic was sporadic and fit the free tier, with cold-start latency as the accepted cost.
- Cover the operational details most project walkthroughs skip: how credentials and IAM permissions were handled, whether deployment was console clicks or scripted (CLI, Terraform, CI), what it cost, and how I saw logs and errors.
- Be specific about limits: what would break at 100 times the users, and what I would change today (managed database, infrastructure as code, containers, monitoring).
- Name only services I can explain in depth. Candidates report deep follow-up questions on the technologies they list, so leave out anything I only touched once.
Follow-up
- If you rebuilt this project today, what would you change and why?
- What happens to your system if its database or region becomes unavailable?
- How did you secure the credentials your application used?
What was the most difficult technical challenge you faced in your last role, and how did you resolve it?
What was the most difficult technical challenge you faced in your last role, and how did you resolve it?
Approach
- Pick a challenge with real technical substance (a performance bottleneck, a data-corruption bug, a failed migration, a scaling limit), and set up the constraints and stakes in two sentences.
- Walk through the diagnosis in order: the symptom, the hypotheses I formed, and how I narrowed them (logs, metrics, a profiler, reproducing it in staging, bisecting recent changes). Include what I ruled out and the evidence that ruled it out.
- Describe the fix and the alternatives I weighed, with the trade-off. For example: adding an index versus caching versus rewriting the query, and why I chose one.
- Give a measured result (latency, error rate or cost before and after) and the prevention step: a regression test, an alert or a runbook entry.
- Keep my own contribution separate from the team's. Saying 'I' for actions that were mine and naming help I received makes the story credible.
Follow-up
- How did you confirm the root cause rather than a coincidence?
- What would you have done if your first fix had not worked?
- What did you change so the same class of problem does not come back?
Why did you choose [Specific Technology/Database] for your project instead of [Alternative]?
Why did you choose [Specific Technology/Database] for your project instead of [Alternative]?
Approach
- Start from the requirements that forced the decision (access patterns, consistency needs, schema stability, expected scale, team familiarity, cost), then show how each option met or missed them.
- Use precise technical differences. PostgreSQL offers joins, foreign-key constraints and transactions across tables. A document store such as MongoDB suits nested records whose shape varies. DynamoDB gives predictable low latency at scale but needs its access patterns designed around partition and sort keys up front, with limited ad hoc querying.
- Name what the choice cost and how I handled it. For example: I chose DynamoDB, lost ad hoc analytics, and exported data to S3 for Athena queries.
- Say whether I would make the same choice now and what evidence would change my mind (a new query pattern, a cost curve, operational pain).
- Avoid answers like 'it was popular' or 'I already knew it' unless I own them as a deliberate trade-off against delivery time.
Follow-up
- What would make you switch to the alternative today?
- Did you benchmark or prototype both options before choosing? What did you measure?
- How would you migrate the data if you had to change that choice?
How did you test and validate the software you built in your previous projects?
How did you test and validate the software you built in your previous projects?
Approach
- Describe the layers: unit tests for pure logic (pytest, JUnit, Jest) with cloud SDK calls mocked (for example moto for boto3), integration tests against real dependencies in containers (Testcontainers or docker-compose with Postgres), and a small set of end-to-end tests.
- For APIs, test the contract and the failure paths: status codes, response schema, invalid input, missing auth, timeouts and retries from dependencies, plus edge cases such as empty or very large payloads.
- Explain the automation: tests, linting and type checks run on every pull request in CI (for example GitHub Actions). Coverage is a signal for untested code, not a target.
- Validate after deployment as well: a staging environment, smoke tests, a canary or blue/green rollout, and metrics with alerts and a rollback path. Add load tests (k6, Locust) before making any scaling claim.
- Anchor the answer with one concrete bug a test caught, or one that escaped, and the test I added afterwards.
Follow-up
- How do you test code that writes to S3 without calling AWS?
- Tell me about a bug that reached production. Which test would have caught it?
- How would you test infrastructure changes, for example Terraform?
p99 jumped on one listing filter while p50 stayed flat
After a release that added an owner_user_id filter to the resource listing, p99 rose from 90 ms to 1.9 s while p50 stayed at 40 ms. Traffic and row counts are unchanged. resource carries the index (tenant_id, status, updated_at DESC, resource_id DESC). The new query filters tenant_id and owner_user_id, orders by updated_at DESC, resource_id DESC, and takes 20 rows. On PostgreSQL, explain the shape of the regression, prove it from a query plan, and give the index you would add.
Approach
- Start from the shape. A flat p50 with a moved p99 means a subset of requests changed cost, not all of them, so the first job is naming the subset. Bucket the endpoint's latency by the tenant's row count; the natural hypothesis is that large tenants are a small share of requests and all of the tail.
- Get the plan for the new query on a large tenant with EXPLAIN (ANALYZE, BUFFERS). Expect an index scan over the tenant's range, a filter discarding most of it, then a Sort feeding the Limit, possibly reporting Sort Method: external merge Disk. Read actual rows on the scan node, not estimated.
- Explain why the existing index cannot serve it. A composite B-tree is seekable only as a left prefix, and with no equality predicate on status the scan cannot treat updated_at as an ordering, because rows in the tenant's range are ordered by status first. Everything matching must be read and sorted before LIMIT 20 can apply, so a tenant with 400,000 rows pays 400,000 rows to return 20.
- Add (tenant_id, owner_user_id, updated_at DESC, resource_id DESC). Equality on the first two columns leaves the index ordered by updated_at within that pair, so the plan becomes an index scan that stops after 20 rows with no Sort node. PostgreSQL can scan a B-tree backwards, so the DESC markers matter only if the two sort columns ever disagree in direction; keeping them explicit documents the order the keyset cursor depends on.
Follow-up
- The endpoint paginates with OFFSET. What does page 500 cost with your index, and what does the keyset version cost?
- How would you have caught this before release, given that a 10,000-row seed database produces the same plan shape at an unnoticeable cost?
The plan starts with the three reported rounds and your own CV inventory, spends two days on cloud fundamentals, one on Python, APIs and debugging, one on project defence, and ends with the business-facing stories and a full spoken run-through.
Prepare, practise & reflect
One practical outcome each day. Spend longer where you need it.
0 / 7 done01Map the loop and inventory your CV
- Write the three reported rounds (HR Screening, Business Head Conversation, Technical Round) and, under each, the question types candidates report for that stage.
- List every cloud service, language and tool on your CV. Beside each, write one project where you used it and mark the ones you could not defend in detail.
Deliverable: A one-page loop map and a CV inventory table with each service marked defensible or to be revised.
02Cloud fundamentals: models, benefits and the VPC
- Write short spoken answers on the advantages of cloud over on-premise, and on public, private and hybrid cloud, each with one trade-off.
- Explain a VPC out loud: subnets, routing, firewalls and where the public internet fits. Use AWS terms, and GCP terms if your CV mentions GCP.
- Compare IaaS, PaaS and SaaS with one example from your own work for each.
Deliverable: Three recorded spoken answers (cloud benefits, deployment models, VPC), each with one stated trade-off.
Practice prompt ↗Practice prompt ↗Practice prompt ↗03Cloud fundamentals: scaling and securing data
- Describe how auto-scaling works: a scaling group, a metric, a threshold, a cooldown. List the metrics you would pick for a CPU-bound service and for a queue-driven worker.
- Write the layers for securely storing sensitive user data: encryption at rest and in transit, key management, least-privilege IAM, network isolation and audit logging.
- Sketch a storage design for user-generated media on a mobile app and say which storage type holds what.
Deliverable: A one-page cheat sheet with auto-scaling triggers and a secure-data checklist, plus the media storage sketch.
Practice prompt ↗Practice prompt ↗04Python, REST APIs and debugging
- Solve a Python problem from PracHub's practice library, the rolling failure rate per destination exercise, and explain the data structure you chose.
- Design a small REST API that returns user profile data from a cloud database: endpoints, status codes, errors, and where SQL or NoSQL fits.
- Work through the p99 latency debugging exercise from the practice library, and write the order in which you would check logs, recent deploys and dependencies for a service throwing 500 errors.
Deliverable: A working Python solution, an API outline with endpoints and error handling, and a written debugging checklist.
Practice prompt ↗Practice prompt ↗05Defend your past projects
- Draw the architecture of your undergraduate final project or most recent role, and write what you would change if you rebuilt it on today's cloud services.
- Write the answer to why you chose one technology or database over its alternative, with the criteria you used.
- Write the hardest-challenge story and how you tested and validated your software: unit tests, integration tests, staging, monitoring.
Deliverable: An architecture sketch plus three written project answers: the technology-choice reasoning, the hardest challenge and the testing approach.
Practice prompt ↗Practice prompt ↗Practice prompt ↗Practice prompt ↗06Behavioral stories for the business-facing rounds
- Write bullet outlines for the learning-fast, ambiguous-requirements, disagreement and competing-deadlines stories, each with situation, your action, result and lesson.
- Add one sentence of client or business impact to each story.
- Say each story out loud and cut anything that does not show a decision you made.
Deliverable: Four story outlines with results, each rehearsed aloud once.
Practice prompt ↗Practice prompt ↗Practice prompt ↗Practice prompt ↗07Motivation, career direction and a full run-through
- Write the answers to why cloud computing and why Ankercloud, and where you see your career heading, using only company facts you have checked.
- Run a full mock: a CV walk-through, then the cloud basics, a project defence, and two behavioral stories, all spoken aloud.
- Write your questions for the Business Head and review your weakest CV-inventory item.
Deliverable: Two polished motivation and career answers, a list of questions to ask, and a notes page on what to fix after the mock.
Practice prompt ↗Practice prompt ↗Practice prompt ↗Practice prompt ↗Expand any day for tasks and deliverables. Your progress is saved on this device.
The HR Screening and Business Head Conversation are reported to cover your background, career goals, communication and understanding of the company, and the reported behavioral questions ask for projects and judgement. For a cloud engineering role, the stories should show decisions you made, how you handled unclear requirements from the business side, and a result a client or manager would care about.
Tell me about a time you had to learn a new technology quickly to complete a project.
Tell me about a time you had to learn a new technology quickly to complete a project.
Approach
- Choose a story with a real deadline and a technology you had not used, ideally cloud-related such as a managed service, Terraform or Kubernetes, so it supports your fit for the role. State the gap in two sentences: what you did not know and what was due.
- Show the learning method as steps you can name: read the provider documentation for the core concepts, build the smallest working prototype, ask someone who knew it one targeted question, then replace the prototype with the real implementation.
- Show how you stayed safe while learning: tests, a staging deployment, a rollback path or monitoring on the first release. This proves you did not trade quality for speed.
- Close with a result and a lesson: what shipped, what it did for the project, and what you would do sooner next time. If something stayed shallow, say so and say how you filled it in.
Follow-up
- How did you decide what to learn first and what to skip for now?
- What did you get wrong early on, and how did you find out?
- How would you apply that approach to a cloud service you have never touched?
Why are you passionate about cloud computing and joining Ankercloud specifically?
Why are you passionate about cloud computing and joining Ankercloud specifically?
Approach
- Split the answer into two halves. For cloud computing, name something specific you built, migrated or fixed (a deployment, a cost reduction, an auto-scaling setup) and what it taught you, instead of saying it is scalable and modern.
- For the company half, use only facts you checked yourself: Ankercloud works with AWS and GCP, has client-facing and managed-services work, and engineers sit alongside architects. Connect one of those to something you want to do.
- Link the two halves to a direction: how this role would deepen a skill you already started building. Keep it honest; an invented backstory is easy to expose in a follow-up.
- Keep the answer short enough to leave room for questions, and end with what you hope to learn, not with flattery.
Follow-up
- Which AWS or GCP service have you enjoyed working with most, and why?
- What other employers did you consider, and why this one?
- What part of client-facing or managed-services work appeals to you, and what worries you about it?
How do you handle situations where technical requirements from the business side are ambiguous?
How do you handle situations where technical requirements from the business side are ambiguous?
Approach
- Start with a real case where a business owner gave a vague requirement such as make it faster or make it secure. Say what you did first: ask what outcome they wanted, who the users were, and what limits applied (deadline, budget, compliance).
- Turn the vague wording into something testable: for example, a target latency at a given load, or which data counts as sensitive. Write your assumptions down and send them back as a short written summary so the owner can confirm or correct them.
- Separate what was known from what was open, and build the smallest reversible slice while waiting for answers instead of blocking or silently guessing.
- Mention written follow-up as a habit when teams work across time zones, as at least one candidate review notes. Finish with the outcome and what changed because you asked.
Follow-up
- What do you do when the stakeholder cannot decide?
- Tell me about a time an assumption you made turned out wrong.
- How would you explain the cost of a changed requirement to someone non-technical?
Tell me about a time you disagreed with a team member on a technical approach. How did you handle it?
Tell me about a time you disagreed with a team member on a technical approach. How did you handle it?
Approach
- Pick a disagreement about a technical approach, such as two database choices or deployment designs, where both positions were reasonable. Describe the other person's view fairly in one sentence before giving yours.
- Show that you moved the argument from opinion to criteria: cost, latency, operational burden, security, team familiarity. Then show the evidence step, such as a small proof of concept, a benchmark or a short design note that both sides could read.
- State who made the final call and how the decision was recorded. If you turned out to be wrong, say so and what you changed; if you were right, show how you kept the working relationship intact.
- Avoid stories that end with escalation to a manager as the win, or that cast the colleague as the problem. End with what you do differently when you spot a disagreement early.
Follow-up
- What if the other person had been more senior than you?
- What would have made you change your mind?
- How did the team work together afterwards?
Where do you see your career in cloud engineering heading over the next few years?
Where do you see your career in cloud engineering heading over the next few years?
Approach
- Give a direction you can defend in cloud engineering rather than a title. A believable shape is a near-term goal (deepen hands-on work in AWS or GCP, infrastructure as code, containers) and a longer-term path such as architecture, managed services or a client-facing technical role.
- Tie each step to something concrete: a certification you plan to take, a project you will build, or a skill the role itself offers through working with Cloud Architects and the Managed Services team.
- Show you understand that the cloud landscape keeps shifting, and say how you keep up (documentation, side projects, release notes from AWS or GCP).
- Keep it honest and flexible: a plan that fits this role is stronger than one that treats it as a stepping stone to something unrelated.
Follow-up
- What would you need to learn to reach that point?
- How would you feel about spending a stretch in managed services or client-facing work?
- How have you kept up with changes in a cloud platform you use?
How do you prioritize your tasks when managing multiple urgent project deadlines?
How do you prioritize your tasks when managing multiple urgent project deadlines?
Approach
- Give a real example with at least two things due at once. List the tasks with deadline, business impact, dependencies and effort, and show you ranked them on impact and urgency instead of doing whatever came in last.
- Show that you did not decide alone when priorities conflicted: you took the ranking to the stakeholders, asked which outcome mattered most, and agreed what could slip or shrink in scope.
- Say how you communicated what slipped. A short written update with new dates beats silence, and a production issue affecting users normally outranks a feature due date.
- Close with the result and the habit you kept, such as a visible task list or a daily check on blockers. Avoid answers that rely on working longer hours.
Follow-up
- What if two stakeholders each insist their task is the top priority?
- How did you tell the person whose work slipped?
- What do you do when a production incident lands in the middle of a deadline?
- 01
Tell me about a time you had to learn a new technology quickly to complete a project.
- 02
Why are you passionate about cloud computing and joining Ankercloud specifically?
- 03
How do you handle situations where technical requirements from the business side are ambiguous?
- 04
Tell me about a time you disagreed with a team member on a technical approach. How did you handle it?
- 05
Where do you see your career in cloud engineering heading over the next few years?
- 06
How do you prioritize your tasks when managing multiple urgent project deadlines?
How hard is the Ankercloud Software Engineer technical round?
Candidates generally rate the difficulty as average. Several report a friendly, conversational round that still ended without an offer because their technical depth fell short. Prepare the cloud basics (VPC, auto-scaling, secure storage, deployment models) and your project choices so you can explain mechanisms and trade-offs aloud.
Ankercloud Software Engineer candidate reports ↗How many rounds are there and how long does the process take?
Candidates report three rounds in this order: HR Screening, Business Head Conversation, Technical Round, over roughly 3-5 weeks. Specialised tracks such as Cloud Managed Services or Principal Architecture are reported to add an extra technical deep-dive, so ask the recruiter for your exact loop.
Ankercloud Software Engineer candidate reports ↗How much does my undergraduate project matter if I have industry experience?
Candidates report that early-career loops lean on academic projects, internships and cloud basics, and one reported question asks about the cloud aspects of an undergraduate final project. With industry experience, prepare your hardest challenge and your technology choices from your last role, and keep the final project as a backup example.
Ankercloud Software Engineer candidate reports ↗Do I need an AWS or GCP certification?
Candidates report that certifications such as AWS Solutions Architect or GCP Cloud Engineer are not strictly required for standard Software Engineer roles, but can help show your fundamentals. A certification does not replace hands-on answers, so be ready to describe what you built.
Ankercloud Software Engineer candidate reports ↗What topics does Ankercloud test in interviews?
Reported topics include AWS, cloud computing basics, Python, managed services, cloud architecture, Linux and GCP. Beyond those, prepare REST API design, basic to intermediate algorithms and debugging a failing service, which candidates list for the technical stage. Exact emphasis depends on the role you apply for.
Ankercloud Software Engineer candidate reports ↗Which languages and tools should I be ready to discuss?
The requirements candidates describe list Python, Java or Node.js, Git, RESTful APIs and both SQL and NoSQL databases, with Terraform, CloudFormation, Docker and Kubernetes as helpful extras. Pick one language you can code in comfortably, and be honest about tools you have only read about.
PracHub Software Engineer practice ↗Should I ask questions in the Business Head round?
Candidate tips suggest preparing questions for this conversation, for example about the company's expansion plans, its biggest technical hurdles, or how engineering supports the sales and managed services teams. Pick two that you genuinely want answered.
PracHub Software Engineer practice ↗Sources & methodology 3 sources ↗
No official company page is cited. Rounds and questions come from candidate reports and PracHub editorial material; each source shows the date it was read.
- 01Ankercloud Software Engineer candidate reports ↗
Company-reported rounds, questions and FAQ.
Candidate reports · Accessed 2026-09-22 - 02PracHub Software Engineer practice ↗
PracHub practice material, not company-reported.
PracHub page · Accessed 2026-09-22 - 03PracHub preparation framework ↗
PracHub preparation guidance.
PracHub page · Accessed 2026-09-22
Explore related engineering environments and compare the preparation focus.
Lambda Software Engineer Interview Guide
Failure-handling practice for Lambda software engineer candidates: requests whose outcome a timeout leaves unknown, where a retry is safe, and deduplicating at the receiver instead of assuming exactly-once delivery.
CoreWeave Software Engineer Interview Guide
Failure-handling practice for CoreWeave software engineer candidates: requests whose outcome a timeout leaves unknown, where a retry is safe, and deduplicating at the receiver instead of assuming exactly-once delivery.
Harvey Software Engineer Interview Questions & Guide 2026
Prepare for the software engineer interview at Harvey with original coding, system design and debugging exercises, each paired with a worked solution and the reasoning behind it.
Western Alliance Bank Software Engineer Interview Guide
What Western Alliance Bank asks Software Engineer candidates, from reported rounds and questions.