Senior IT Infrastructure Engineer

Responsibilities

• Design, deploy, and maintain secure, scalable, and high-performing cloud environments across AWS, Azure, and hybrid infrastructure.
• Audit cloud resources and align them with best-practice configurations, tagging standards, access controls, and operational governance.
• Implement and manage IAM policies, role-based access controls, MFA enforcement, and integrations with Okta and Microsoft Entra ID/Azure AD under Security team guidance.
• Automate infrastructure provisioning, configuration, and repeatable workflows using Terraform, CloudFormation, PowerShell, Workato, or similar platforms.
• Monitor and improve cloud availability, performance, security posture, and cost efficiency through dashboards, alerts, tagging discipline, and operational reviews.
• Partner with Security on encryption, key management, network segmentation, SOC 2, ISO 27001, Zero Trust, and related cloud security initiatives.
• Collaborate with Engineering and IT Operations on migrations, SaaS/PaaS optimization, disaster recovery, and business continuity planning.
• Participate in incident response, root cause analysis, and remediation for cloud-related issues.
• Maintain architecture diagrams, runbooks, SOPs, and self-service knowledge resources.
• Use AI-enabled tools responsibly for analysis, documentation, log review, infrastructure-as-code drafting, and workflow improvement while validating outputs.
• Mentor junior engineers and help improve cloud automation, governance, and operational practices.

Expected Outcomes

• Improved cloud governance, tagging accuracy, access control hygiene, and resource visibility.
• Reduced manual operational work through automation and reusable infrastructure patterns.
• Stronger security execution across identity, encryption, segmentation, and compliance-aligned controls.
• Better cloud spend visibility and actionable optimization recommendations.
• More reliable cloud operations through monitoring, documentation, incident response, and root-cause-analysis discipline.

Required Qualifications

• 6+ years of experience in IT infrastructure, cloud infrastructure, systems engineering, or related technical operations roles.
• 3+ years of hands-on experience administering enterprise AWS and Azure environments.
• Practical experience with IAM, RBAC, networking, storage, compute, monitoring, and cloud security controls.
• Hands-on experience with infrastructure-as-code or automation tools such as Terraform, CloudFormation, PowerShell, Workato, or equivalent.
• Experience integrating or administering Okta, Microsoft Entra ID/Azure AD, SSO, and MFA.
• Strong troubleshooting skills across cloud, identity, networking, and SaaS environments.
• Clear documentation and communication skills for technical and cross-functional audiences.

Preferred Qualifications

• Experience supporting SOC 2, ISO 27001, Zero Trust, or similar compliance and security frameworks.
• Experience with FinOps practices, tagging policies, cost dashboards, or cloud spend optimization.
• Experience supporting disaster recovery, business continuity, or migration initiatives.
• Experience mentoring junior engineers or serving as a technical escalation point.
• Experience in a high-growth SaaS, private equity-backed, or global technology environment.
• Ability to build reusable automation, governance workflows, and self-service operational resources.
• Demonstrated use of AI-assisted workflows for cloud analysis, documentation, automation review, or operational efficiency with strong validation practices.