Cloud Infrastructure Engineer III

Astreya • Boulder, CO

1d • $85,120 - $134,400

About The Position

The Senior Cloud Infrastructure Engineer serves as the design lead for the Security Systems Infrastructure Engineering function on a large-scale enterprise security systems programme. The role owns the architecture of cloud and virtualized infrastructure supporting enterprise physical security applications, including high-availability topologies, identity and access models, tiered storage strategies, and the Business Requirements and Technical Design Documentation used by implementation teams.

The engineer is the primary engineering-tier escalation point, mentors implementation engineers, and partners with sustainment, network engineering, and programme governance. The role is responsible for delivering resilient, secure, and auditable infrastructure in line with defined SLAs and KPIs.

Requirements

• 8–12 years of progressive experience in cloud and enterprise infrastructure engineering, including architecture and design ownership in production environments.
• Expert GCP architecture across Compute Engine, Cloud Storage, VPC, and IAM, with demonstrated cloud-native high-availability design.
• Expertise in Terraform and Ansible, which are mandatory, plus Puppet, Git, Bash, Python, and PowerShell for orchestration and automation.
• Strong Linux and Windows enterprise OS administration and virtualization experience with VMware and/or Hyper-V; Dell iDRAC and DellOME hardware management.
• IAM design across operating systems and cloud, including Active Directory, Google IAM, and RBAC, with least-privilege enforcement.
• Storage and database architecture experience, including retention, backup and restore, and audit logging.
• Strong technical authoring skills for BRDs, TDDs, and runbooks from baseline.
• Network engineering fundamentals to coordinate with the Network Engineering team.
• Required certification: GCP Professional Cloud Architect.

Nice To Haves

• Strongly preferred certifications: GCP Professional Cloud Security Engineer and GCP Professional Cloud DevOps Engineer.
• Beneficial certifications: Red Hat RHCE, HashiCorp Terraform Associate or Professional, and ITIL Foundation.

Responsibilities

• Design and architect GCP environments using Compute Engine, Cloud Storage retention policies, and VPC networking for centralized security applications, establishing standards for implementation engineers.
• Architect virtualized on-premise and cloud-hosted infrastructure for Linux and Windows enterprise operating systems.
• Design and own high-availability mechanisms, including failover, hot-swap, cold-swap, clustering, geo-redundancy, and load-balancing across physical and virtual infrastructure.
• Define infrastructure IAM models across operating systems and cloud, VM, and physical-server environments, applying least-privilege and least-service operational security.
• Design tiered storage and database architectures for retention, uptime, and auditability, including backup and restore and audit-logging strategies.
• Establish orchestration and configuration-management standards using Terraform, Ansible, Puppet, Git, PowerShell, DellOME, and NetBox, and set automation patterns in Python and Bash.
• Serve as the primary engineering-tier escalation point for operations and sustainment when standard playbooks are exceeded.
• Monitor hardware and software product lifecycles and lead end-of-life evaluations and product upgrade testing.
• Author BRDs, TDDs, and runbooks from baseline and manage initiatives through the programme’s PM Workflow to align with SLAs and KPIs.
• Mentor and provide technical guidance to implementation (L2) engineers, including design reviews and knowledge-transfer sessions.

Benefits

• Medical insurance through UHC (PPO, HSA, and Surest options) or Kaiser (HMO option for California employees only).
• Dental insurance through UHC.
• Vision insurance through Nationwide Vision by UHC.
• Flexible Spending Account for health and dependent care.
• Pre-tax commuter benefit for parking and transit, location-specific.
• Continuing education and professional development through platforms such as Udemy and Coursera.
• Corporate Wellness Program provided by Goomi Group.
• Employee Assistance Program.
• Wellness Days.
• 401(k) plan.
• Basic and supplemental life insurance.
• Short-term and long-term disability insurance.
• Critical illness, critical hospital, and voluntary accident insurance.
• Tuition reimbursement, available six months after start date and capped.
• Paid Time Off accrued and prorated, maximum 120 hours annually.
• Paid holidays.
• Statutory leaves, paid time, or other ancillary benefits required under state and federal law.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed