Senior Cloud Infrastructure Engineer

Overview

Infrastructure and Hybrid Cloud Architecture

• Design, build, and maintain infrastructure across AWS, Azure, GCP, and on-premises environments.
• Maintain secure configuration baselines and patch management for operating system images and on-premises hardware.
• Build reusable, auditable Infrastructure as Code for cloud and remaining on-premises server deployments.
• Support VPC provisioning, security group standards, cloud networking, storage management, and datacenter decommissioning.
• Execute AWS migration waves, including server deployments and infrastructure change requests through Infrastructure as Code.

Disaster Recovery and Resilience

• Own disaster recovery architecture and execution across cloud environments.
• Maintain disaster recovery solutions and backup strategy, run regular drills, document gaps, and drive remediation.
• Design infrastructure for resilience and treat recoverability as a first-class requirement.

Security and Compliance

• Support vulnerability management triage, threat detection, and infrastructure security findings review.
• Support PHI and PII classification scanning, penetration test coordination, and security exception approvals.
• Maintain compliance controls, audit readiness, access recertification, evidence collection, and change freeze coordination.
• Maintain EKS container runtime security sensor coverage as part of platform hardening.

Cloud Operations and Identity

• Manage cross-account access controls using least-privilege principles across multi-account, multi-cloud environments.
• Manage load balancers, DNS, VPCs, security groups, compute, storage, databases, cost, performance, and resilience.
• Monitor infrastructure health using native and third-party observability tools.
• Administer and harden Linux and Windows Server environments, including Active Directory, Group Policy, DNS, certificates, and hybrid identity.

Automation and Reliability

• Build and evolve CI/CD pipelines for secure, repeatable infrastructure deployments.
• Write automation to reduce manual work and enforce operational consistency.
• Monitor, scale, and maintain production infrastructure with availability, performance, and security as priorities.
• Participate in on-call rotation, provide L2 escalation, lead root cause analysis, and maintain operational runbooks.

Governance and Collaboration

• Identify cost anomalies, remediate tagging issues, and make cost, performance, and resilience tradeoffs.
• Use AI coding assistants for Infrastructure as Code, scripting, troubleshooting, runbooks, and incident documentation.
• Provide technical guidance on infrastructure resilience, migration sequencing, and recovery design.
• Document architecture, disaster recovery runbooks, and standard operating procedures.

Required Qualifications

• 5+ years of hands-on cloud infrastructure engineering experience with deep AWS expertise and experience in other cloud environments.
• Direct experience with disaster recovery design and execution.
• Strong Infrastructure as Code experience using CDK, Terraform, or CloudFormation.
• Experience with containerized environments and Kubernetes/EKS, including version upgrades and lifecycle management.
• Linux and Windows Server administration experience, including patching and OS lifecycle management at scale.
• Solid IAM design experience, including cross-account access and least-privilege enforcement.
• Strong scripting ability in Python, Bash, or PowerShell.
• Experience building and maintaining CI/CD pipelines.
• Comfort serving as the primary on-call and L2 escalation point for infrastructure incidents.

Preferred Qualifications

• Experience operating in regulated environments such as FedRAMP, HIPAA, or SOC 2.
• AWS Solutions Architect or SysOps certification at the Associate or Professional level.
• Experience with hybrid infrastructure during active migration from on-premises virtualization to cloud-native services.
• Familiarity with DISA STIG or CIS benchmark hardening and vulnerability management workflows.
• FinOps or cost governance experience, including tagging standards enforcement.
• Healthcare technology experience and familiarity with AI-assisted engineering workflows.

Behaviors and Traits