Staff Cloud Infrastructure Engineer
Staff Cloud Infrastructure Engineer will architect secure, scalable AWS and data-center infrastructure while building identity platforms, automation, and security controls for AI-powered systems. The role requires 7+ years of relevant experience, strong AWS and Kubernetes expertise, and proficiency in Python or Go and Terraform.
About the job
Responsibilities
- Design and architect secure, scalable cloud infrastructure and identity platforms across AWS and company data centers.
- Implement IAM, IGA, authentication, authorization, SSO, MFA, identity lifecycle management, and provisioning/deprovisioning solutions.
- Build automation, integrations, and infrastructure-as-code solutions.
- Design security controls for AI-powered systems, including governed and audited agent workflows, service identity, secrets management, key management, authentication, and authorization.
- Partner with Security, Engineering, and Infrastructure teams on secure-by-design solutions and Zero Trust principles.
- Drive technical direction and cross-team initiatives that improve infrastructure scalability, reliability, security, and developer experience.
- Write reliable code, participate in architecture and code reviews, mentor engineers, and raise technical standards.
- Support production systems through scalability, resiliency, observability, and automation.
- Participate in on-call and incident response for the Developer Productivity organization.
Requirements
- 7+ years of experience in cloud infrastructure, platform engineering, identity and access management, identity engineering, or security engineering.
- Experience designing and owning complex production infrastructure or platform systems at scale.
- Strong knowledge of authentication, authorization, identity lifecycle management, and federation protocols, including SAML, OAuth2, OIDC, SCIM, and RBAC.
- Experience designing and operating identity and access controls in AWS, including production-level AWS services.
- Experience deploying and operating services on Kubernetes.
- Strong automation and coding skills with Python or Go, plus Terraform or similar infrastructure-as-code technologies.
- Experience implementing Zero Trust, least-privilege access, and compliance frameworks such as SOC 2, FedRAMP, or ITAR.
- Experience monitoring, troubleshooting, and improving production services through incident response and automation.
- Ability to influence technical direction, drive cross-team initiatives, and mentor engineers.
- Strong collaboration and communication skills.
Nice-to-haves
- Experience with identity platforms such as Okta, Microsoft Entra ID (Azure AD), or modern IAM/IGA platforms.
- Experience with Azure and/or Google Cloud.
Skills
AWS, IAM, Iga, SAML, Oauth2, OIDC, SCIM, RBAC, Kubernetes, Python, Go, Terraform, Zero Trust, Okta, Microsoft Entra Id
Similar jobs
DevOps / SRE jobs
Anthropic
San Francisco, CAStaff-level site reliability engineer responsible for safely deploying and operating safeguards infrastructure across model releases and cloud platforms. The role emphasizes production change management, high-stakes incident response, and automating manual launch and validation processes.
Polymarket
New York, NY
Staff Infrastructure Engineer responsible for designing and operating scalable infrastructure for growth systems, including onboarding, referrals, and user acquisition. The role requires 7+ years of production infrastructure experience, strong reliability instincts, and independent judgment in a high-autonomy environment.
Fortanix
Santa Clara, CA
Leads the architecture, development, and operation of cloud, Kubernetes, on-premises, and hybrid infrastructure, while building developer platforms and CI/CD automation. Requires at least six years of infrastructure or related engineering experience, deep Kubernetes expertise, strong programming skills, and technical leadership.
Scale AI
San Francisco, CA
Own the network architecture and standards for a multi-cloud enterprise AI platform deployed across Kubernetes environments and customer-controlled networks. The role requires deep cloud and Kubernetes networking expertise, strong security fundamentals, and the judgment to establish scalable, supportable connectivity patterns.
Motive
Buffalo, NYStaff Platform Engineer will build and improve automated delivery pipelines, developer environments, infrastructure, and release systems across the engineering organization. The role requires 6+ years of engineering experience, a bachelor’s degree, and expertise with CI/CD, cloud infrastructure, containers, and infrastructure as code.