Cloud Infrastructure Engineer
Design, build, and operate secure cloud infrastructure and identity platforms in AWS and on-prem data centers. Implement IAM, automation with Terraform/Python/Go, security controls for AI systems, and Zero Trust principles while participating in on-call.
About the job
Responsibilities
- Design, build, and operate secure, scalable cloud infrastructure and identity platforms in AWS and our own data centers.
- Implement and manage IAM, IGA, authentication, authorization, SSO, MFA, identity lifecycle management, and provisioning/deprovisioning solutions using modern identity platforms and standards such as SAML, OAuth2, OIDC, and SCIM.
- Develop automation, integrations, and infrastructure-as-code solutions using Terraform and programming languages such as Python and Go.
- Design and implement security controls for AI-powered systems, including controlled, audited, and governed agent workflows, while contributing to core security services such as service identity, secrets management, key management, authentication, and authorization.
- Partner with Security and Engineering teams to deliver secure-by-design solutions, implement Zero Trust principles, and reduce operational friction.
- Write high-quality, reliable code, participate in architecture and code reviews, support critical production systems, and drive operational excellence through scalability, resiliency, and automation.
- Be part of oncall and incident response of Dev Productivity org.
Skills & Qualifications
- 5+ years of experience in Cloud Infrastructure, Identity & Access Management (IAM), Identity Engineering, or Security Engineering.
- Strong knowledge of authentication, authorization, identity lifecycle management, and federation protocols including SAML, OAuth2, OIDC, SCIM, and RBAC.
- Experience designing and operating identity and access controls within AWS environments, with experience building and operating production level services on AWS.
- Experience working with container technology.
- Experience deploying and operating services on Kubernetes.
- Strong automation and coding skills with Python, Go, Terraform, or similar technologies.
- A security-first mindset with experience implementing Zero Trust, least-privilege access, and compliance frameworks such as SOC2, FedRAMP, or ITAR.
- An product and operational mindset with experience supporting and improving production level services through monitoring, troubleshooting, incident response, and automation.
- Excellent collaboration and communication skills, with a proven ability to drive projects and influence technical decisions across teams.
Preferred Skills & Qualifications
- Hands-on experience with any Identity platforms - Okta, Microsoft Entra ID (Azure AD), and modern IAM/IGA platforms.
- Experiences with Azure and/or GCP is a bonus.
Skills
AWS, Terraform, Python, Go, Kubernetes, IAM, SAML, Oauth2, OIDC, SCIM, Zero Trust, Okta, Microsoft Entra Id
Similar jobs
DevOps / SRE jobs
Granica
Remote
Build and operate cloud infrastructure, Kubernetes platforms, CI/CD systems, and observability for exabyte-scale data systems and reliable enterprise AI workloads. The role requires 5+ years of infrastructure, platform, or distributed systems experience and strong programming and cloud skills.
Baseten
San Francisco, CA
Leads global GPU capacity management across acquisition, orchestration, infrastructure automation, and incident response. The role requires 5+ years of experience, deep Kubernetes expertise, production Go or Python skills, and the ability to balance reliability with unit economics.
Teleport
United States
Build IT workflow automation and security tooling using Go, Temporal, Kubernetes, Terraform, and shell scripting. The role also supports internal IT systems and integrations across endpoint management, identity, access, and security administration.
Crusoe
United States
Electrical Field Engineer supports on-site installation, testing, and commissioning of data center power systems like switchgear, transformers, UPS, and generators. Requires 5+ years experience, Bachelor's in Electrical Engineering, and 50%+ travel to sites.
Beacon AI
San Carlos, CA
Build and operate AWS cloud, ML, LLM, RAG, and IoT infrastructure, including deployment platforms, data pipelines, vector search, observability, security, and cost controls. The role requires deep AWS experience and production experience with LLM-powered applications.