Cloud Engineer

Herff Jones•Indianapolis, IN

1d•Hybrid

About The Position

Herff Jones is seeking a Cloud Engineer to join its six-person Infrastructure Services team. The role is the technical owner of the company’s AWS and Azure environments and connects its on-premises datacenter with cloud infrastructure. The engineer establishes secure, governed, resilient cloud foundations; supports systems hosted in the cloud; and builds and maintains cloud resources for initiatives both within and outside a major infrastructure modernization program. In the near term, the position also shares support of Windows and Linux server infrastructure. The role partners closely with Security and Application teams and shares support, cross-coverage, and an on-call rotation with Infrastructure Services colleagues. The Cloud Engineer designs, builds, and operates AWS and Azure infrastructure, including landing zones, governance, hybrid connectivity, security controls, automation, monitoring, and cost management. The role provides oversight of environments used by implementation partners, supports partner-built systems, and contributes to workload migrations and operational handoffs. It also handles cloud and hybrid incidents, leads troubleshooting and root-cause analysis for Priority 1–2 issues, and participates in change and maintenance processes. The position is hybrid and based in Indianapolis, Indiana. It involves a mix of on-site and remote work, occasional travel to Herff Jones facilities, prolonged sitting and computer use, and occasional work in datacenter environments, including lifting equipment up to 50 pounds. Participation in after-hours on-call rotation and scheduled maintenance windows is required.

Requirements

Hands-on production experience with core AWS and Azure services across compute, storage, networking, identity, and monitoring; strong AWS experience is highly preferred.
Working knowledge of cloud landing zones and multi-account or multi-subscription governance, and of the AWS Well-Architected Framework or Microsoft Cloud Adoption Framework.
Experience with hybrid connectivity and cloud networking, including VPC/VNet design, VPN, AWS Direct Connect or Azure ExpressRoute, DNS, and routing, and with serverless services such as AWS Lambda or Azure Functions.
Solid Windows Server and Linux administration experience in enterprise environments.
Scripting skills in PowerShell, Python, or Bash for infrastructure automation.
Disciplined approach to documentation and change management.
Strong problem-solving and analytical mindset.
Ability to communicate complex technical concepts to non-technical stakeholders.
Composure and sound judgment under pressure during outages and periods of major change.
Collaborative and proactive attitude focused on continuous improvement.
Strong organizational skills and attention to detail.
Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
At least 5 years of systems engineering experience in multi-site enterprise environments, including at least 3 years designing and operating production workloads in AWS or Azure.
Participation in a shared after-hours on-call rotation and scheduled maintenance windows.

Nice To Haves

Industry cloud certifications such as AWS Certified Solutions Architect – Associate or Professional, AWS Certified SysOps Administrator – Associate, Microsoft Certified: Azure Administrator Associate (AZ-104), Microsoft Certified: Azure Solutions Architect Expert (AZ-305), or equivalent.
Experience with infrastructure-as-code and CI/CD tools such as Terraform, AWS CloudFormation or CDK, Bicep, GitHub Actions, or Azure DevOps.
Experience with containers and Kubernetes such as Docker, Amazon EKS, or AKS.
Multi-cloud experience across AWS and Azure, including migrating workloads from on-premises datacenters.
Experience with Microsoft 365, Microsoft Entra ID, and hybrid identity.
Experience supporting consultants, managed service providers, or implementation partners working in a shared cloud environment, including during large-scale infrastructure transformation programs.
Familiarity with PCI DSS requirements and NIST or CIS frameworks.

Responsibilities

Design, build, and maintain secure, scalable infrastructure in AWS and Azure, including compute, storage, networking, serverless, and container services.
Establish and maintain cloud landing zones, account and subscription structures, guardrails, tagging, and governance aligned with the AWS Well-Architected Framework and Microsoft Cloud Adoption Framework.
Build and maintain cloud infrastructure as code with source control and CI/CD pipelines, and automate routine tasks using PowerShell, Python, or Bash.
Develop and maintain cloud standards, reference architectures, documentation, diagrams, and configuration baselines.
Contribute to the multi-year infrastructure roadmap for the cloud and hybrid domain.
Design and maintain secure hybrid connectivity and DNS between on-premises sites and AWS and Azure in partnership with network engineering.
Provide and govern the cloud environment used by implementation partners, ensuring underlying infrastructure aligns with security and governance standards and best practices.
Troubleshoot and support partner-built systems hosted in the company environment, and build and maintain cloud resources for initiatives outside the partner engagement.
Share near-term support of on-premises Windows and Linux server infrastructure, including patching, lifecycle management, and troubleshooting.
Support workload migrations and operational handoffs of partner-delivered infrastructure, including runbooks, monitoring, backup, and disaster recovery.
Implement cloud security controls, including IAM, least-privilege access, encryption, logging, and policy enforcement, in partnership with the Security team.
Integrate cloud platforms with enterprise identity, including Active Directory, Microsoft Entra ID, and AWS IAM Identity Center, in partnership with Infrastructure engineers.
Monitor and optimize cloud spend through rightsizing, reserved capacity, and cost reporting, and support budget planning and forecasting.
Support PCI DSS requirements, audit readiness, and vulnerability remediation for cloud and server infrastructure.
Implement and tune monitoring, alerting, and logging for cloud and hybrid workloads.
Serve as an escalation point for cloud and hybrid infrastructure incidents and lead troubleshooting and root-cause analysis for Priority 1–2 issues.
Plan and execute changes and maintenance windows with rollback plans, following the Change Management process.
Participate in a shared Infrastructure team on-call rotation for after-hours support.
Mentor engineers and support staff and contribute to cross-training and knowledge sharing.
Perform other duties as assigned.