Cloud Infrastructure Systems Engineer

Acima•Draper, UT

3d•Onsite

About The Position

Provide expert-level design, implementation, enhancement, engineering, and operational support for enterprise infrastructure, with a strong focus on hybrid cloud (Azure and AWS), automation, and modern DevOps practices. Help transition our on-prem datacenter into a modern hybrid public/private cloud architecture with an emphasis on Infrastructure as Code (IaC) and configuration management pipelines. Help prepare, maintain, and transition internal infrastructure to SaaS platforms where needed. Lead initiatives to integrate and automate systems using Terraform, IaC, and scripting languages to ensure secure, scalable, and resilient solutions aligned with cloud adoption and well-architected principles.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical field (or equivalent work experience).
7+ years in systems or platform engineering, including enterprise-scale public cloud experience (Azure and AWS).
Strong experience designing and operating hybrid environments and multi-cloud patterns in both clouds.
Deep expertise in Terraform and IaC best practices (working knowledge of Bicep/ARM is a plus).
Experience building and operating CI/CD pipelines, GitOps workflows, and policy-as-code patterns.
Strong configuration management and automation experience (Linux and Windows).
Advanced scripting skills in Python and PowerShell.
Experience building and integrating REST APIs for automation and monitoring.
Strong background in identity and access management, including Microsoft Entra ID (Azure AD), Active Directory, LDAP, certificate services, and cloud IAM concepts.
Solid understanding across Windows Server, Linux/Unix, and hybrid identity solutions.
Proven ability to lead infrastructure projects, work cross-functionally, and mentor engineers.

Nice To Haves

Certifications: Azure Solutions Architect, Terraform Associate, Microsoft Certified: Identity and Access Administrator.
Strong hands-on experience with storage, SAN, backup solutions, and disaster recovery planning.
Experience with VMware and OLVM/KVM platforms in production environments.
Experience managing and monitoring Kubernetes and Docker runtimes.
Experience migrating services to SaaS platforms and operating hybrid integration patterns.
Experience with multi-account governance patterns and landing zone operations.

Responsibilities

Architect, implement, and operate core cloud foundations (networking, identity, security controls, and baseline services) in both clouds.
Design and operate landing zone foundations and guardrails (identity, network topology, policy/controls, logging/monitoring, and account/subscription organization).
Define and enforce governance and access controls (least privilege, role-based access, and policy/controls), and keep guardrails consistent across environments.
Integrate on-prem infrastructure with cloud services for hybrid identity, networking, workload migration, and SaaS adoption.
Optimize cost management, observability, and performance tuning for cloud-hosted and hybrid workloads.
Apply well-architected practices to improve reliability, security, performance, and operational excellence.
Design, develop, and maintain Terraform modules for provisioning and managing cloud and hybrid infrastructure.
Implement IaC best practices to automate deployment, configuration, and lifecycle management of resources across environments.
Build reusable templates and automation pipelines for consistent, scalable infrastructure delivery.
Enforce infrastructure changes through code review and CI/CD pipelines to reduce drift and improve auditability.
Version and validate Terraform modules with automated checks and clear change documentation to support safe reuse.
Build and maintain configuration management pipelines and baselines for Linux and Windows (example tooling: Ansible, DSC, or equivalent).
Automate routine operations, reporting, and remediation using scripting, configuration-as-code patterns, and cloud-native tooling.
Standardize platform build patterns (golden images, baseline hardening, repeatable environment builds) across cloud and on-prem.
Develop and maintain automation scripts in Python and PowerShell for system administration, monitoring, and integration tasks.
Build operational automation to reduce toil and improve reliability (health checks, drift detection, remediation, and compliance reporting).
Build, consume, and integrate REST APIs for automation, monitoring, and third-party service integration.
Enable interoperability between cloud platforms, identity providers, and enterprise applications.
Provide expert-level administration for ADLDS/LDAP, Active Directory, Microsoft Entra ID (Azure AD), Microsoft Certificate Authority, IAM integrations, and hybrid identity patterns.
Oversee administration and performance of Linux/Unix (RHEL/Oracle Linux preferred) and Microsoft Windows systems, both on-premises and in the cloud.
Operate and modernize on-prem compute platforms (VMware and OLVM/KVM) and integrate them into hybrid cloud patterns.
Partner across storage and backup platforms to ensure backup, recovery, immutability, and resilience controls align to platform standards.
Design, establish, and maintain technical standards and security policies for core infrastructure and cloud environments.
Engineer holistic certificate management systems for on-premises and hybrid cloud environments.
Triage and remediate P1/P2 incidents, document work in ITSM tooling, and drive restoration steps and follow-through.
Own and drive root cause analysis (RCA) and problem records to closure, including corrective actions and prevention steps.
Participate in change management and quality gates for platform changes; ensure changes have clear implementation and backout plans.
Maintain runbooks, SOPs, and operational documentation; update after incidents and platform changes.
Coordinate vendor support cases as needed and drive issues to resolution.