Cloud Infrastructure / Platform Engineer

Position Summary

Were looking for a Cloud Infrastructure/Platform Engineer to build and operate a secure, scalable cloud landing zone and platform foundations. Youll define and automate FinOps and Security governance using policy-as-code, create reusable infrastructure-as-code (IaC) libraries, and enable teams through CI/CD pipelines and GitOps practices. You should bring deep hands-on expertise in at least one major cloud (Azure or AWS preferred), with additional experience in GCP, OCI, or IBM Cloud as a plus.

Key Responsibilities

• Design, build, and operate cloud landing zones (multi-account/subscription, org structure, network, identity, logging, security baselines).
• Implement governance and guardrails using policy-as-code (e.g., Azure Policy, AWS Organizations/SCPs, OPA/Conftest), including exception handling and auditability.
• Define and deploy FinOps observability and enforcement tooling to enable DevOps teams to operate efficiently as well as cross-account financial oversight.
• Deliver an infrastructure platform as a product to the internal development community.
• Develop reusable IaC modules/libraries (Terraform primary; Bicep/ARM and CloudFormation also valued) and promote standard patterns for teams.
• Build and maintain CI/CD pipelines for infrastructure, OS Images, containers, and platform components using GitOps workflows (PR-based changes, automated validation, progressive delivery).
• Standardize environments (dev/test/prod) with consistent controls, tagging/metadata, and cost management guardrails.
• Embed security and compliance into build/deploy: secret handling, encryption, IAM least privilege, vulnerability scanning, and evidence generation.
• Observability and SRE practices: implement monitoring/alerting and dashboards, support incident response, and help define/track SLIs/SLOs for platform services.
• Collaborate in an agile delivery model; participate in planning, refinement, and execution (SAFe experience is a bonus).

Required Qualifications

• Deep hands-on experience engineering cloud infrastructure on one or more of Azure, AWS, and GCP (architecture + implementation).
• Strong proficiency with Infrastructure as Code (Terraform primary; Bicep/ARM and CloudFormation).
• Specific background in cloud cost optimization and FinOps practices, including Savings Plans, Reserved Instances, native cloud cost management tools, and policy-based cost controls.
• Proven experience implementing landing zones / foundational cloud platforms (identity, network, shared services, governance).
• Experience with policy-as-code and automated compliance (e.g., Azure Policy, AWS Config + SCPs, OPA/Conftest).
• CI/CD expertise for infrastructure: pipeline design, testing/validation, approvals, environment promotion, drift detection.
• Working knowledge of configuration management/automation in current-state enterprise environments (e.g., Ansible and Puppet).
• Strong understanding of IAM, network security, encryption, key management, and secure-by-default patterns.
• Comfortable with Git-based workflows (PR reviews, branching strategies, versioning, release management).
• Scripting/programming ability (e.g., Python, Bash, PowerShell, Go) to build automation and tooling.

Preferred Qualifications (Nice to Have)

• Experience with Oracle Cloud (OCI)
• Experience with Cloud Financial Management (FinOps) and implementing FinOps policies using automation (Policy as Code)
• Strong Network Engineering background including cloud and hybrid-cloud connectivity, network security policy automation, and cloud native network architectures.
• Experience working in hybrid environments to deliver platform automation solutions in the Data Center.
• Familiarity with security and control frameworks such as NIST CSF, NIST PHONE_NUMBER, SOX, SOC 2, and ISO 27002.
• Kubernetes/platform experience (AKS/EKS/GKE/OKE), service mesh, or container platform operations.
• Experience with platform engineering concepts: developer portals/catalogs, golden paths, internal products.
• Familiarity with observability stacks: native CSP tooling, Datadog, Splunk, LogicMonitor
• SAFe or other structured agile delivery framework experience (PI planning, ARTs, epics/features).

The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.