Cloud Engineer

Job summary

This role engineers and operates secure, resilient cloud infrastructure across multi-account AWS environments, on-premises systems, and SaaS integrations, with a focus on embedding security controls throughout infrastructure engineering and CloudOps. Responsibilities include automating infrastructure with Terraform and AWS CloudFormation, improving secure delivery pipelines, integrating AWS security services such as GuardDuty and Security Hub, supporting incident response, and implementing PCI DSS controls and audit evidence.

Qualifications

• Three or more years of experience in cloud engineering, infrastructure engineering, DevOps, DevSecOps, cloud security engineering, or comparable technical roles
• Hands-on experience deploying, securing, and operating AWS infrastructure in production or regulated hybrid environments
• Experience implementing or improving security controls within production cloud or hybrid infrastructure
• Proficiency with Infrastructure as Code, preferably Terraform
• Hands-on experience with CI/CD platforms and source control
• Strong scripting or software automation skills using Python, Bash, PowerShell, or a comparable language
• Experience with multi-account AWS environments, identity and access controls, logging and monitoring, configuration compliance, vulnerability management, encryption, data protection, and network security
• Experience participating in infrastructure or security incident response, root-cause analysis, and corrective-action implementation
• Working knowledge of regulated-industry security and compliance practices

Responsibilities

• Engineer and operate security capabilities supporting multi-account AWS environments
• Develop and maintain Terraform, AWS CloudFormation, scripts, modules, policies, and automated workflows
• Implement and improve infrastructure delivery pipelines
• Implement and maintain secure, scalable, and resilient infrastructure patterns across AWS and hybrid integrations
• Automate the identification, prioritization, tracking, and remediation of infrastructure vulnerabilities
• Integrate security controls across on-premises environments, AWS infrastructure, and relevant SaaS services
• Improve infrastructure telemetry, alerting, and operational response
• Partner with Cybersecurity to translate PCI DSS and other applicable control requirements into technical controls
• Monitor infrastructure health, security posture, reliability, and control effectiveness
• Participate in the team's 7x24 on-call rotation

Skills

Certifications

Degrees

Languages

Work schedule

Industry

Relocation