Cloud Engineer

University of St Thomas•St. Paul, MN

21d•$82,090 - $88,692•Hybrid

About The Position

The University of St. Thomas invites qualified candidates to apply for a Cloud Engineer position on the Enterprise Application Development and Cloud team within Innovation Technology Services. The team designs, builds, integrates and maintains critical campus systems, custom applications, websites and apps using modern cloud platforms, best practices, methodologies and tools. The University of St. Thomas was recognized as a 2025 AWS Champions Award winner and a team member as an AWS Education Champion in the 2024 cohort for leading the university through a significant digital transformation, focusing on strategic cloud adoption and secure cloud integration. This position offers the flexibility to work remotely on a regular basis. However, the role requires in-person attendance for monthly staff meetings and occasional events on our St. Paul or Minneapolis campuses. Work schedules and on-site requirements may change at any time based on business needs. The University of St. Thomas embraces belonging and equal opportunity for all. Our convictions of dignity, diversity and personal attention call us to embody and champion an inclusive environment. The University is an Equal Employment Opportunity Employer (EEO). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, status as a protected veteran, or other protected characteristic. This commitment to inclusion and equal opportunity is consistent with our mission: Inspired by Catholic intellectual tradition, the University of St. Thomas educates students to be morally responsible leaders who think critically, act wisely, and work skillfully to advance the common good. A successful candidate will possess a commitment to the ideals of this mission. The Cloud Engineer is responsible for designing, implementing, and managing secure and scalable cloud infrastructure, integrations, and access across AWS in support of the University's Cloud-First Strategy. This hybrid role supports critical enterprise systems and manages integrations with platforms such as ERP, CRM, Data Lake, SaaS and third-party systems. Reporting to the Director of Enterprise Application Development & Cloud, this role works closely with the Principal Cloud Architect, DevOps/DevEx Engineer, and AI Software Engineer. It also collaborates with Information Security, Networking, and Data/Analytics teams to ensure our cloud environments are secure, compliant, and integrated with internal and external systems.

Requirements

Knowledge of secure system design, cloud networking, encryption standards, and identity management.
2-3 years of hands-on experience with AWS including cloud networking, security or cloud-native integration.
Proficiency with AWS services including IAM, VPC, CloudTrail, CloudWatch, KMS, API Gateway, Lambda, ECS, S3, and Route 53.
Familiarity with Terraform or CloudFormation and CI/CD for infrastructure-as-code deployments.
Experience with integration methods including APIs (REST, GraphQL), webhooks, Lambda-based middleware, flat-file transfers, and SaaS data exchange.

Nice To Haves

Hands-on experience with Git, Python, Node.js. Java experience is a bonus.
AWS Certification (Cloud Practitioner, Security, Advanced Networking, or Solutions Architect).
Experience with Azure and or GCP.
Experience with ERP and CRM platforms (e.g. Salesforce, Workday, Ellucian Banner).
Exposure to compliance standards such as FERPA, HIPAA, or internal university data policies.
Familiarity with secure patterns for event-driven architectures, serverless development, and Data Lake governance.
Excellent communication skills and experience working in a cross-functional IT team.

Responsibilities

Application & Data Integration Design and support integrations between University systems (e.g., ERP, SIS, CRM) and external platforms (e.g., SaaS, cloud tools, third-party APIs).
Build secure, event-driven and API-based workflows using AWS Lambda, Step Functions, EventBridge, and API Gateway.
Manage data transfer processes including flat files, webhooks, and agent-based sync with security and monitoring best practices.
Ensure all integrations follow security, privacy, and compliance standards (e.g., secure data handling, encryption in transit and at rest).
Leverage centralized logging and monitoring using CloudWatch, CloudTrail, Config, and third-party tools including Sumo Logic.
Develop dashboards and alerting systems to monitor key metrics for cloud workloads, network traffic, and integration failures.
Work closely with Data & Analytics to ensure Data Lake ingestion pipelines are monitored, governed, and secure.
Support application, enterprise and data teams by building secure and reliable pipelines for event streaming, data sharing, and app integration.
Partner with Data & Analytics team to enforce data governance, access control, and tagging across the AWS Data Lake.
Document infrastructure, integrations, and security patterns to support cross-training, knowledge transfer and operational continuity.
Collaborate with the ITS security team to bridge cloud and enterprise security and monitoring goals.
Design and enforce IAM roles and policies following least privilege and Zero Trust principles.
Implement and manage cloud-native security services: AWS IAM, SSO, Organizations Security Hub, GuardDuty, Macie, Inspector KMS, Secrets Manager, Certificate Manager AWS WAF and Shield
Enable secure development workflows in coordination with Applications and Enterprise teams (DevOps/DevEx Engineer, ERP Cloud Engineer, ERP Software Engineers in particular) embedding security into CI/CD pipelines and infrastructure deployments.
Support audits, assessments, and internal security reviews across cloud environments and data integrations.
Collaborate with ITS networking team to bridge cloud and enterprise infrastructure.
Build and manage secure and reliable VPC architecture across multiple accounts and workloads.
Maintain hybrid network connectivity (e.g., Transit Gateway, VPN, VPC Peering) to support on-prem and cloud system integration.
Configure Route 53 DNS, NAT Gateways, load balancers (ALB/NLB), and firewall rules to support secure, highly available services.