Cloud Infrastructure Engineer III

Astreya•Boulder, CO

About The Position

Astreya is seeking a senior cloud infrastructure engineer to serve as the design lead for the Security Systems Infrastructure Engineering function on a large-scale enterprise security systems programme. The role owns the architecture of cloud and virtualized infrastructure supporting enterprise physical security applications, including high-availability topologies, identity and access models, and tiered storage strategies. The engineer authors Business Requirements and Technical Design Documentation to guide implementation and serves as the primary engineering-tier escalation point. The position partners with sustainment, network engineering, and programme governance to deliver resilient, secure, and auditable infrastructure aligned with defined SLAs and KPIs. It also mentors implementation engineers, establishes infrastructure and automation standards, monitors product lifecycles, and leads end-of-life evaluations and upgrade testing.

Requirements

8–12 years of progressive experience in cloud and enterprise infrastructure engineering, including architecture and design ownership in production environments.
Expert GCP architecture experience across Compute Engine, Cloud Storage, VPC, and IAM, with demonstrated cloud-native high-availability design.
Infrastructure-as-Code mastery in Terraform and Ansible; experience with Puppet, Git, Bash, Python, and PowerShell for orchestration and automation.
Strong Linux and Windows enterprise operating-system administration and virtualization experience with VMware or Hyper-V.
Experience with Dell iDRAC and DellOME hardware management.
IAM design experience across operating systems and cloud, including Active Directory, Google IAM, and RBAC, with least-privilege enforcement.
Storage and database architecture experience, including retention, backup and restore, and audit logging.
Strong technical authoring skills for BRDs, TDDs, and runbooks from baseline.
Network engineering fundamentals to coordinate with the Network Engineering team.
Required certification: GCP Professional Cloud Architect.

Nice To Haves

GCP Professional Cloud Security Engineer certification.
GCP Professional Cloud DevOps Engineer certification.
Red Hat RHCE certification.
HashiCorp Terraform Associate or Professional certification.
ITIL Foundation certification.

Responsibilities

Design and architect GCP environments using Compute Engine, Cloud Storage with retention policies, and VPC networking for centralized security applications, establishing standards for implementation engineers.
Architect virtualized on-premise and cloud-hosted infrastructure for Linux and Windows enterprise operating systems.
Design and own high-availability mechanisms, including failover, hot-swap, cold-swap, clustering, geo-redundancy, and load-balancing, across physical and virtual infrastructure.
Define infrastructure IAM models across operating systems and cloud, VM, and physical-server environments, applying least-privilege and least-service operational security.
Design tiered storage and database architectures for retention, uptime, and auditability, including backup and restore and audit-logging strategies.
Establish orchestration and configuration-management standards using Terraform, Ansible, Puppet, Git, PowerShell, DellOME, and NetBox, and set automation patterns in Python and Bash.
Serve as the primary engineering-tier escalation point for operations and sustainment functions when standard playbooks are exceeded.
Monitor hardware and software product lifecycles and lead end-of-life evaluations and product upgrade testing.
Author Business Requirements Documents, Technical Design Documentation, and runbooks from baseline; manage initiatives through the programme’s PM Workflow to align with SLAs and KPIs.
Mentor and provide technical guidance to implementation (L2) engineers through design reviews and knowledge-transfer sessions.

Benefits

Medical coverage through UHC (PPO, HSA, and Surest options) or Kaiser (HMO option for California employees only).
Dental coverage through UHC nationwide.
Vision coverage through UHC.
Flexible Spending Account for health and dependent care.
Pre-tax commuter benefit for parking and transit, where available by location.
Continuing education and professional development through platforms including Udemy and Coursera.
Corporate wellness program provided by Goomi Group.
Employee Assistance Program.
Wellness Days.
401(k) plan.
Basic and supplemental life insurance.
Short-term and long-term disability insurance.
Critical illness, critical hospital, and voluntary accident insurance.
Tuition reimbursement, available six months after start date and capped.
Paid Time Off, accrued and prorated, up to 120 hours annually.
Paid holidays.
Other statutory leaves, paid time, or ancillary benefits required under state and federal law.