Senior Cloud Infrastructure Engineer

Job summary

Design, build, and operate secure cloud environments across GCP, AWS, and Azure for engineering, manufacturing, and business operations. Lead solutions from requirements and architecture through implementation and operational handoff, using Terraform or OpenTofu, infrastructure-as-code and CI/CD tools, and controls such as CMMC Level 2 and NIST SP 800-171 to protect CUI and export-controlled data. Maintain compliance evidence and operational documentation, manage cloud costs and reliability, and mentor engineers.

Benefits

Qualifications

• At least 10 years of relevant infrastructure, systems, or cloud engineering experience, including at least 7 years building production cloud environments; 10 years of directly relevant experience may substitute for a degree
• Expert hands-on experience with at least one of GCP, AWS, or Azure, and ability and willingness to learn the other platforms
• Strong Terraform or OpenTofu experience, including module design, state management, workspaces, and testing
• Experience with a cloud-native infrastructure-as-code tool, such as Bicep/ARM, CloudFormation, GCP Deployment Manager, or Config Connector
• Experience with configuration management tools and Git-based CI/CD platforms
• Hands-on implementation of security controls in regulated environments, such as CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, or DFARS 252.204-7012
• Scripting experience in Python, PowerShell, or Bash
• Experience creating operational documentation for service desk, operations, or security teams
• Experience using diagramming tools such as Visio, Lucidchart, or draw.io
• Experience gathering requirements and presenting cloud solution architectures to stakeholders

Responsibilities

• Design, build, and maintain cloud infrastructure across GCP, AWS, and Azure, including government and sovereign cloud environments
• Build reusable, version-controlled landing zones and infrastructure-as-code modules
• Create CI/CD pipelines with automated testing, peer review, and policy-as-code controls
• Harden operating systems and cloud platforms using Ansible or similar tools and maintain DISA STIG and CIS baselines
• Implement and validate CMMC Level 2 and NIST SP 800-171 controls, and design for ITAR and EAR requirements
• Maintain compliance evidence, including System Security Plan inputs, configuration baselines, architecture diagrams, and audit artifacts
• Monitor and correct configuration drift and manage changes through formal change control
• Coordinate with cybersecurity, identity, and endpoint teams on logging, monitoring, access management, and incident response
• Gather business and application requirements and translate them into technical designs
• Evaluate cloud platforms and deployment patterns for cost, security, compliance, performance, resiliency, and supportability
• Lead solutions from concept through design, implementation, operational handoff, and support
• Create and maintain runbooks, procedures, diagrams, configuration standards, troubleshooting guides, and knowledge articles
• Establish documentation standards and review cycles, and prepare new services for operational support
• Mentor engineers and help set infrastructure engineering standards

Skills

Certifications

Degrees

Work schedule

Industry

Relocation